CVE-2022-44877

login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...

CVE-2022-44877

login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...

CVE-2022-44877

creationtimestamp| type| source ---|---|--- 2023-01-05 19:40:32+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6905 2023-01-06 02:19:20+00:00| seen| https://t.me/cibsecurity/56025 2023-01-06 08:11:28+00:00| published-proof-of-concept| https://t.me/proxybar/1261 2023-01-07...

CVE-2022-44877

login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...

CVE-2022-44877

CVE-2022-44877 affects CentOS Web Panel / Control Web Panel (CWP) 7 prior to 0.9.8.1147. The vendor’s login/index.php component is vulnerable to OS command injection via shell metacharacters in the login parameter, enabling remote code execution. Public templates and security feeds describe it as...

CWP login.php Unauthenticated RCE

Control Web Panel versions use exploit/linux/http/control/webpanellogincmdexec msf undefinedwebpanellogincmdexec show actions ...actions... msf undefinedwebpanellogincmdexec set ACTION msf undefinedwebpanellogincmdexec show options ...show and set options... msf undefinedwebpanellogincmdexec run...

CVE-2021-44877

creationtimestamp| type| source ---|---|--- 2021-12-21 20:12:21+00:00| seen| https://t.me/cibsecurity/34451...

CVE-2021-44877

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

CVE-2021-44877

CVE-2021-44877 affects Dalmark Systems Systeam 2.22.8 build 1724. A broken access control flaw allows an unauthenticated attacker to use an API endpoint to generate a temporary JWT token that references the correct tenant before authentication and to request system configuration parameters. This ...