[0day-rubbish] ZesleCP 3.1.21 Authenticated arbitrary file write to root RCE via cron (8.8)

<p>Posted by disclosure via Fulldisclosure on Sep 03</p>0day Rubbish Research Team is publicly disclosing a vulnerability in ZesleCP 3.1.21.<br /> <br /> Type: Authenticated arbitrary file write to root RCE via cron (CWE-73)<br /> CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)<br /> Impact: Root file write and code execution on the hosting control panel host: all hosted accounts, databas