ROOTPLOIT
Server: LiteSpeed
System: Linux in-mum-web1878.main-hosting.eu 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: u435929562 (435929562)
PHP: 7.4.33
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: //opt/cloudlinux/venv/bin/plesk_suid_caller.py
# coding: utf-8

# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2021 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENSE.TXT

import sys
import json
import traceback

from clcommon import ClPwd
from clcommon.cpapi.plugins.plesk import userdomains
from clcommon.cpapi.cpapiexceptions import NoPanelUser


try:
    uid = int(sys.argv[1])
    _clpwd = ClPwd()
    pwd_list = _clpwd.get_pw_by_uid(uid)
    for user_pwd in pwd_list:
        username = user_pwd.pw_name
        try:
            res = userdomains(username, as_root=True)
            print(json.dumps(res))
            sys.exit(0)
        except NoPanelUser:
            pass
    print(json.dumps({}))
    sys.exit(0)
except (NoPanelUser, KeyError):
    print(json.dumps({}))
    sys.exit(11)
except Exception:
    print(json.dumps(traceback.format_exc()))
    sys.exit(10)