Brainycp vulnerabilities
Published CVEs affecting Brainycp products: 1 record(s), with severity, exploitation and fixes.
CVE-2023-53945
High · 8.8
CWE-78 Dec 19, 2025
BrainyCP 1.0 Remote Code Execution via Authenticated Crontab Manipulation
BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.