CVE-2020-15609
Published Jul 28, 2020This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit thi…
Vendor/product archive
centos-webpanel / centos_web_panel CVEs
Beta · best-effort6 CVEs tagged to centos-webpanel / centos_web_panel — 1 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2019-14246
Published Aug 21, 2019In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an a…
CVE-2019-14245
Published Aug 21, 2019In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oauthv2) from the server via an attacker…
CVE-2019-13386
Published Jul 26, 2019In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shell command, i.e., obtain a reverse shel…
CVE-2019-10893
Published Apr 18, 2019CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP S…
CVE-2019-10261
Published Apr 3, 2019CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.
Showing 1-6 of 6 CVEsPage 1 of 1