Vendor CVEs

Control Webpanel

All CVEs

62 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2025-48703	Centos Web Panel Centos Web Panel	Cri	0.78	9.0	1.00	KEV	Sep 19, 2025	CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
CVE-2019-13360	Centos Web Panel Centos Web Panel	Cri	0.69	9.8	0.24		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
CVE-2021-31324	Centos Web Panel Centos Web Panel	Cri	0.66	9.8	0.34		May 18, 2021	The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution.
CVE-2021-31316	Centos CentOS Web Panel	Cri	0.65	9.8	0.13		May 18, 2021	The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter.
CVE-2023-42121	Control By Web Control Web Panel	Cri	0.64	9.8	0.01		May 3, 2024	Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw…
CVE-2020-15623	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15615	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. The issue results from the…
CVE-2020-15614	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the cha parameter,…
CVE-2020-15613	Centos CentOS Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line…
CVE-2020-15612	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. When parsing the userLogin…
CVE-2020-15610	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the modulo…
CVE-2020-15608	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the ai_service…
CVE-2020-15606	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. The issue results from the…
CVE-2020-15435	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_start…
CVE-2020-15433	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the phpversion…
CVE-2020-15432	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15430	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username…
CVE-2020-15429	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter,…
CVE-2020-15428	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the line parameter,…
CVE-2020-15427	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_disk_usage.php. When parsing the folderName…
CVE-2020-15426	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15425	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. The issue results from the…
CVE-2020-15424	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the domain…
CVE-2020-15423	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the dominio…
CVE-2020-15422	Centos Web Panel Centos Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15420	Centos CentOS Web Panel	Cri	0.64	9.8	0.08		Jul 28, 2020	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter,…
CVE-2019-13605	Centos Web Panel Centos Web Panel	Hig	0.61	8.8	0.15		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is…
CVE-2018-18772	Centos Web Panel Centos Web Panel	Hig	0.60	8.8	0.03		Nov 20, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as demonstrated by executing an arbitrary OS command.
CVE-2023-42123	Control By Web mysql_manager	Hig	0.57	8.8	0.02		May 3, 2024	Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…
CVE-2019-13477	Centos Web Panel Centos Web Panel	Hig	0.57	8.8	0.01		Aug 21, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
CVE-2019-13359	Centos Web Panel Centos Web Panel	Hig	0.54	7.5	0.26		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVE-2023-42122	Control By Web Control Web Panel	Hig	0.51	7.8	0.01		May 3, 2024	Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the…
CVE-2020-15628	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15624	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the…
CVE-2020-15622	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15621	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15620	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id…
CVE-2020-15619	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15618	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15617	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15616	Centos CentOS Web Panel	Hig	0.49	7.5	0.04		Jul 28, 2020	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2019-14724	Centos Web Panel Centos Web Panel	Hig	0.49	7.5	0.04		Sep 11, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.
CVE-2018-18774	Centos Web Panel Centos Web Panel	Med	0.43	6.1	0.05		Nov 20, 2018	CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.
CVE-2019-15235	Centos Web Panel Centos Web Panel	Med	0.42	6.5	0.01		Dec 17, 2019	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/[USERNAME]/tmp/session/sess_xxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to gain access to the victim's…
CVE-2019-14782	Centos Web Panel Centos Web Panel	Med	0.42	6.5	0.01		Dec 17, 2019	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to make a request to extract the victim's…
CVE-2019-14721	Centos Web Panel Centos Web Panel	Med	0.42	6.5	0.02		Sep 10, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account.
CVE-2019-13387	Centos Web Panel Centos Web Panel	Med	0.40	6.1	0.02		Jul 26, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php (parameter fm_current_dir) allows attackers to steal a cookie or session, or redirect to a phishing website.
CVE-2019-13383	Centos Web Panel Centos Web Panel	Med	0.39	5.3	0.14		Jul 16, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response.
CVE-2019-13476	Centos Web Panel Centos Web Panel	Med	0.36	5.4	0.07		Aug 21, 2019	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, XSS in the domain parameter allows a low-privilege user to achieve root access via the email list page.
CVE-2019-12190	Centos Web Panel Centos Web Panel	Med	0.36	5.4	0.05		May 21, 2019	XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter.

CVE-2025-48703CriKEVSep 19, 2025
Centos Web Panel
Centos Web Panel
risk 0.78cvss 9.0epss 1.00
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
CVE-2019-13360CriJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.69cvss 9.8epss 0.24
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
CVE-2021-31324CriMay 18, 2021
Centos Web Panel
Centos Web Panel
risk 0.66cvss 9.8epss 0.34
The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution.
CVE-2021-31316CriMay 18, 2021
Centos
CentOS Web Panel
risk 0.65cvss 9.8epss 0.13
The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter.
CVE-2023-42121CriMay 3, 2024
Control By Web
Control Web Panel
risk 0.64cvss 9.8epss 0.01
Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw…
CVE-2020-15623CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15615CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. The issue results from the…
CVE-2020-15614CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the cha parameter,…
CVE-2020-15613CriJul 28, 2020
Centos
CentOS Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line…
CVE-2020-15612CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. When parsing the userLogin…
CVE-2020-15610CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the modulo…
CVE-2020-15608CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the ai_service…
CVE-2020-15606CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. The issue results from the…
CVE-2020-15435CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_start…
CVE-2020-15433CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the phpversion…
CVE-2020-15432CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15430CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username…
CVE-2020-15429CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter,…
CVE-2020-15428CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the line parameter,…
CVE-2020-15427CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_disk_usage.php. When parsing the folderName…
CVE-2020-15426CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the…
CVE-2020-15425CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. The issue results from the…
CVE-2020-15424CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the domain…
CVE-2020-15423CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the dominio…
CVE-2020-15422CriJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo…
CVE-2020-15420CriJul 28, 2020
Centos
CentOS Web Panel
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter,…
CVE-2019-13605HigJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.61cvss 8.8epss 0.15
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is…
CVE-2018-18772HigNov 20, 2018
Centos Web Panel
Centos Web Panel
risk 0.60cvss 8.8epss 0.03
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as demonstrated by executing an arbitrary OS command.
CVE-2023-42123HigMay 3, 2024
Control By Web
mysql_manager
risk 0.57cvss 8.8epss 0.02
Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…
CVE-2019-13477HigAug 21, 2019
Centos Web Panel
Centos Web Panel
risk 0.57cvss 8.8epss 0.01
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
CVE-2019-13359HigJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.54cvss 7.5epss 0.26
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVE-2023-42122HigMay 3, 2024
Control By Web
Control Web Panel
risk 0.51cvss 7.8epss 0.01
Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the…
CVE-2020-15628HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15624HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the…
CVE-2020-15622HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15621HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the…
CVE-2020-15620HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id…
CVE-2020-15619HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15618HigJul 28, 2020
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15617HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2020-15616HigJul 28, 2020
Centos
CentOS Web Panel
risk 0.49cvss 7.5epss 0.04
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the…
CVE-2019-14724HigSep 11, 2019
Centos Web Panel
Centos Web Panel
risk 0.49cvss 7.5epss 0.04
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.
CVE-2018-18774MedNov 20, 2018
Centos Web Panel
Centos Web Panel
risk 0.43cvss 6.1epss 0.05
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.
CVE-2019-15235MedDec 17, 2019
Centos Web Panel
Centos Web Panel
risk 0.42cvss 6.5epss 0.01
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/[USERNAME]/tmp/session/sess_xxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to gain access to the victim's…
CVE-2019-14782MedDec 17, 2019
Centos Web Panel
Centos Web Panel
risk 0.42cvss 6.5epss 0.01
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to make a request to extract the victim's…
CVE-2019-14721MedSep 10, 2019
Centos Web Panel
Centos Web Panel
risk 0.42cvss 6.5epss 0.02
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account.
CVE-2019-13387MedJul 26, 2019
Centos Web Panel
Centos Web Panel
risk 0.40cvss 6.1epss 0.02
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php (parameter fm_current_dir) allows attackers to steal a cookie or session, or redirect to a phishing website.
CVE-2019-13383MedJul 16, 2019
Centos Web Panel
Centos Web Panel
risk 0.39cvss 5.3epss 0.14
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response.
CVE-2019-13476MedAug 21, 2019
Centos Web Panel
Centos Web Panel
risk 0.36cvss 5.4epss 0.07
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, XSS in the domain parameter allows a low-privilege user to achieve root access via the email list page.
CVE-2019-12190MedMay 21, 2019
Centos Web Panel
Centos Web Panel
risk 0.36cvss 5.4epss 0.05
XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter.

Page 1 of 2