VestaCP hack explained

A few weeks ago the Vesta team released a new version because of a 0day security bug. I think after a few weeks it’s time, to tell the truth about the security bug. On 7 April 2016, I found hack activity on one of my servers. I also received the security report of the hacker to tell me how he has done it. I instantly send this bug to the Vesta team.