CVE-2018-5962

🗓️ 22 Jan 2018 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

index.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpini_editor module or the email_address parameter to the mail_add-new module

Reporter	Title	Published	Views	Family All 8
CNVD	CentOS Web Panel Cross-Site Scripting Vulnerability	24 Jan 201800:00	–	cnvd
Cvelist	CVE-2018-5962	22 Jan 201801:00	–	cvelist
EUVD	EUVD-2018-17728	7 Oct 202500:30	–	euvd
NVD	CVE-2018-5962	22 Jan 201801:29	–	nvd
Prion	Code injection	22 Jan 201801:29	–	prion
Positive Technologies	PT-2018-17250 · Centos · Centos Web Panel	22 Jan 201800:00	–	ptsecurity
Vulnerability Lab	CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities	19 Jan 201800:00	–	vulnerlab
Vulnerability Lab	CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities	19 Jan 201800:00	–	vulnerlab

NVD

Node

control-webpanel webpanelRange≤0.9.8.12

Source	Link
vulnerability-lab	www.vulnerability-lab.com/get_content.php

Parameter	Position	Path	Description	CWE
id	request body	index.php?module=phpini_editor	XSS via id parameter in phpini_editor module (persistent).	CWE-79
email_address	request body	index.php?module=mail_add-new	XSS via email_address parameter in mail_add-new module (persistent).	CWE-79

21 Nov 2024 04:09Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 36.1

EPSS0.0024

CWE-79