Vendor CVEs

Centos Web Panel

All CVEs

79 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2025-48703	Centos Web Panel Centos Web Panel	Cri	0.78	9.0	1.00	KEV	Sep 19, 2025	CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
CVE-2019-13360	Centos Web Panel Centos Web Panel	Cri	0.69	9.8	0.24		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
CVE-2020-10230	Centos Web Panel Centos Web Panel	Cri	0.68	9.8	0.15		Mar 16, 2020	CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter.
CVE-2018-18322	Centos Web Panel Centos Web Panel	Cri	0.68	9.8	0.15		Oct 15, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.
CVE-2021-31324	Centos Web Panel Centos Web Panel	Cri	0.66	9.8	0.34		May 18, 2021	The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution.
CVE-2020-15623	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15615	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. The issue results from the…
CVE-2020-15614	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the cha parameter,…
CVE-2020-15613	Centos CentOS Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line…
CVE-2020-15612	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. When parsing the userLogin…
CVE-2020-15611	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the…
CVE-2020-15610	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the modulo…
CVE-2020-15609	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_stop…
CVE-2020-15608	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the ai_service…
CVE-2020-15607	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line…
CVE-2020-15606	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. The issue results from the…
CVE-2020-15435	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_start…
CVE-2020-15434	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the canal…
CVE-2020-15433	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the phpversion…
CVE-2020-15432	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15431	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter,…
CVE-2020-15430	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username…
CVE-2020-15429	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter,…
CVE-2020-15428	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the line parameter,…
CVE-2020-15427	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_disk_usage.php. When parsing the folderName…
CVE-2020-15426	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15425	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. The issue results from the…
CVE-2020-15424	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the domain…
CVE-2020-15423	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the dominio…
CVE-2020-15422	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15421	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the check_ip…
CVE-2020-15420	Centos CentOS Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter,…
CVE-2019-13605	Centos Web Panel Centos Web Panel	Hig	0.61	8.8	0.15		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is…
CVE-2018-18773	Centos Web Panel Centos Web Panel	Hig	0.60	8.8	0.03		Nov 20, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by changing the root password.
CVE-2018-18772	Centos Web Panel Centos Web Panel	Hig	0.60	8.8	0.03		Nov 20, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as demonstrated by executing an arbitrary OS command.
CVE-2019-13477	Centos Web Panel Centos Web Panel	Hig	0.57	8.8	0.01		Aug 21, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
CVE-2019-13386	Centos Web Panel Centos Web Panel	Hig	0.57	8.8	0.03		Jul 26, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shell command, i.e., obtain a reverse shell with user privilege.
CVE-2018-18323	Centos Web Panel Centos Web Panel	Hig	0.57	7.5	0.71		Oct 15, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
CVE-2019-13359	Centos Web Panel Centos Web Panel	Hig	0.54	7.5	0.26		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVE-2020-15628	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15627	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15626	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the term…
CVE-2020-15625	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_add_mailbox.php. When parsing the…
CVE-2020-15624	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the…
CVE-2020-15622	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15621	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15620	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id…
CVE-2020-15619	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15618	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15617	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…

CVE-2025-48703CriKEVSep 19, 2025
Centos Web Panel
Centos Web Panel
risk 0.78cvss 9.0epss 1.00
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
CVE-2019-13360CriJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.69cvss 9.8epss 0.24
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
CVE-2020-10230CriMar 16, 2020
Centos Web Panel
Centos Web Panel
risk 0.68cvss 9.8epss 0.15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter.
CVE-2018-18322CriOct 15, 2018
Centos Web Panel
Centos Web Panel
risk 0.68cvss 9.8epss 0.15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.
CVE-2021-31324CriMay 18, 2021
Centos Web Panel
Centos Web Panel
risk 0.66cvss 9.8epss 0.34
The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution.
CVE-2020-15623CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15615CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. The issue results from the…
CVE-2020-15614CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the cha parameter,…
CVE-2020-15613CriJul 28, 2020
Centos
CentOS Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line…
CVE-2020-15612CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. When parsing the userLogin…
CVE-2020-15611CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the…
CVE-2020-15610CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the modulo…
CVE-2020-15609CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_stop…
CVE-2020-15608CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the ai_service…
CVE-2020-15607CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line…
CVE-2020-15606CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. The issue results from the…
CVE-2020-15435CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_start…
CVE-2020-15434CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the canal…
CVE-2020-15433CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the phpversion…
CVE-2020-15432CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15431CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter,…
CVE-2020-15430CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username…
CVE-2020-15429CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter,…
CVE-2020-15428CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the line parameter,…
CVE-2020-15427CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_disk_usage.php. When parsing the folderName…
CVE-2020-15426CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15425CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. The issue results from the…
CVE-2020-15424CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the domain…
CVE-2020-15423CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the dominio…
CVE-2020-15422CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15421CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the check_ip…
CVE-2020-15420CriJul 28, 2020
Centos
CentOS Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter,…
CVE-2019-13605HigJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.61cvss 8.8epss 0.15
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is…
CVE-2018-18773HigNov 20, 2018
Centos Web Panel
Centos Web Panel
risk 0.60cvss 8.8epss 0.03
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by changing the root password.
CVE-2018-18772HigNov 20, 2018
Centos Web Panel
Centos Web Panel
risk 0.60cvss 8.8epss 0.03
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as demonstrated by executing an arbitrary OS command.
CVE-2019-13477HigAug 21, 2019
Centos Web Panel
Centos Web Panel
risk 0.57cvss 8.8epss 0.01
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
CVE-2019-13386HigJul 26, 2019
Centos Web Panel
Centos Web Panel
risk 0.57cvss 8.8epss 0.03
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shell command, i.e., obtain a reverse shell with user privilege.
CVE-2018-18323HigOct 15, 2018
Centos Web Panel
Centos Web Panel
risk 0.57cvss 7.5epss 0.71
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
CVE-2019-13359HigJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.54cvss 7.5epss 0.26
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVE-2020-15628HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15627HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15626HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the term…
CVE-2020-15625HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_add_mailbox.php. When parsing the…
CVE-2020-15624HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the…
CVE-2020-15622HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15621HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15620HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id…
CVE-2020-15619HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15618HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15617HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…

Page 1 of 2