Webpanel

CVEs (85)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-25048	CWP CentOS Web Panel	Hig	0.59	8.8	0.19	Jul 7, 2022	Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.
CVE-2023-42123	Control By Web mysql_manager	Hig	0.57	8.8	0.02	May 3, 2024	Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…
CVE-2023-42120	Control By Web Control Web Panel	Hig	0.57	8.8	0.02	May 3, 2024	Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…
CVE-2019-13477	Centos Web Panel Centos Web Panel	Hig	0.57	8.8	0.01	Aug 21, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
CVE-2018-18323	Centos Web Panel Centos Web Panel	Hig	0.57	7.5	0.71	Oct 15, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
CVE-2019-13359	Centos Web Panel Centos Web Panel	Hig	0.54	7.5	0.26	Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVE-2023-42122	Control By Web Control Web Panel	Hig	0.51	7.8	0.01	May 3, 2024	Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the…
CVE-2020-15628	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15627	Centos CentOS Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15626	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the term…
CVE-2020-15625	Centos CentOS Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_add_mailbox.php. When parsing the…
CVE-2020-15624	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the…
CVE-2020-15622	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15621	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15620	Centos CentOS Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id…
CVE-2020-15619	Centos CentOS Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15618	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15617	Centos CentOS Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15616	Centos CentOS Web Panel	Hig	0.49	7.5	0.04	Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2019-14724	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04	Sep 11, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.

CVE-2022-25048HigJul 7, 2022
CWP
CentOS Web Panel
risk 0.59cvss 8.8epss 0.19
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.
CVE-2023-42123HigMay 3, 2024
Control By Web
mysql_manager
risk 0.57cvss 8.8epss 0.02
Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…
CVE-2023-42120HigMay 3, 2024
Control By Web
Control Web Panel
risk 0.57cvss 8.8epss 0.02
Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…
CVE-2019-13477HigAug 21, 2019
Centos Web Panel
Centos Web Panel
risk 0.57cvss 8.8epss 0.01
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
CVE-2018-18323HigOct 15, 2018
Centos Web Panel
Centos Web Panel
risk 0.57cvss 7.5epss 0.71
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
CVE-2019-13359HigJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.54cvss 7.5epss 0.26
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVE-2023-42122HigMay 3, 2024
Control By Web
Control Web Panel
risk 0.51cvss 7.8epss 0.01
Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the…
CVE-2020-15628HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15627HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15626HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the term…
CVE-2020-15625HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_add_mailbox.php. When parsing the…
CVE-2020-15624HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the…
CVE-2020-15622HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15621HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15620HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id…
CVE-2020-15619HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15618HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15617HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15616HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2019-14724HigSep 11, 2019
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.

Page 3 of 5