687 matches found
Cross site request forgery (csrf)
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to make a request to extract the victim's password for the OS...
The vulnerability of the application configuration for managing servers using CentOS Web Panel allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the application configuration for CentOS Web Panel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by modifying the administrator’s email address...
PT-2019-14030 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.864 Description: The issue allows an attacker to obtain a victim's session file name from /home/USERNAME/tmp/session/sess xxxxxx and the victim's token value from /usr/local/cwpsrv/logs/access log. With this...
CVE-2019-16295
Stored XSS in filemanager2.php in CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.885 exists via the cmdarg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim...
CVE-2019-16295
Stored XSS in filemanager2.php in CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.885 exists via the cmdarg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim...
PT-2019-4295 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.885 Description: The issue is related to a lack of input sanitization in the filemanager2.php component, allowing for the execution of arbitrary HTML code or JavaScript scripts. This can be exploited via the cmd...
CVE-2019-14725
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account...
CVE-2019-14724
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32244)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove subdomains from an affected user's account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32248)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to delete an affected user's mail account...
CentOS Web Panel Input Validation Error Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove email forwarding destinations from an affected user's account...
CentOS Web Panel Elevation of Privilege Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. An elevation of privilege vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove targeted users from phpMyAdmin...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32245)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CWP version 0.9.8.851, which arises from a network system or product that does not properly validate incoming data. No detailed vulnerability details are currently available...
PT-2019-13805 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue allows an attacker to modify the e-mail usage value of a victim's account using their own account, due to an insecure object reference. Recommendations: For version 0.9.8.851, at the...
CentOS Web Panel elevation of privilege vulnerability (CNVD-2019-32250)
CentOS Web Panel is a Linux web hosting control panel. An elevation of privilege vulnerability exists in CentOS Web Panel, which can be exploited by an attacker to change the value of an email exploit in an affected user account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32252)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to change the email password in an affected user account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32251)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to access and delete DNS records of affected users...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32243)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to add an email forwarding destination to an affected user's account...