Lucene search
PRIOn knowledge basePRION:CVE-2019-14782HistoryDec 17, 2019 - 4:15 p.m.
Cross site request forgery (csrf)
2019-12-1716:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
23.1%
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim’s session file name from the /tmp directory, and the victim’s token value from /usr/local/cwpsrv/logs/access_log, then use them to make a request to extract the victim’s password (for the OS and phpMyAdmin) via an attacker account.
Related
cvelist
cvelist
CVE-2019-14782
2019-12-17 15:25:33
CVE-2019-15235
2019-12-17 15:20:18
nvd
nvd
CVE-2019-14782
2019-12-17 16:15:12
CVE-2019-15235
2019-12-17 16:15:12
cve
cve
CVE-2019-14782
2019-12-17 16:15:12
CVE-2019-15235
2019-12-17 16:15:12
zdt
zdt
Control Web Panel 0.9.8.864 phpMyAdmin Password Disclosure Vulnerability
2019-12-17 00:00:00
prion
prion
Design/Logic Flaw
2019-12-17 16:15:00
packetstorm
packetstorm
Control Web Panel 0.9.8.864 phpMyAdmin Password Disclosure
2019-12-16 00:00:00