Lucene search
+L

687 matches found

OSV
OSV
added 2019/04/18 8:29 p.m.6 views

CVE-2019-10893

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...

4.8CVSS5.8AI score0.02826EPSS
SaveExploits5References6
NVD
NVD
added 2019/04/18 8:29 p.m.25 views

CVE-2019-10893

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...

4.8CVSS5AI score0.02826EPSS
SaveExploits5References6
Cvelist
Cvelist
added 2019/04/18 7:50 p.m.35 views

CVE-2019-10893

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...

4.9AI score0.02826EPSS
SaveExploits5References6
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.10 views

The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the administration application for CentOS Web Panel admin/index.php?module=rootpwd is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS7.9AI score0.03409EPSS
SaveExploits6References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the application for managing CentOS Web Panel servers admin/index.php?module=sendssh is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS7.9AI score0.0348EPSS
SaveExploits6References3Affected Software1
zdt
zdt
added 2019/04/09 12:00 a.m.538 views

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.c...

5.5AI score0.02826EPSS
SaveExploits5
exploitpack
exploitpack
added 2019/04/08 12:00 a.m.58 views

CentOS Web Panel 0.9.8.793 (Free) 0.9.8.753 (Pro) - Cross-Site Scripting

CentOS Web Panel 0.9.8.793 Free 0.9.8.753 Pro - Cross-Site Scripting Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com...

3.5CVSS5AI score0.02826EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2019/04/08 12:00 a.m.45 views

CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) Cross Site Scripting

Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free an...

5.2AI score0.02826EPSS
SaveExploits5
OSV
OSV
added 2019/04/03 3:29 p.m.6 views

CVE-2019-10261

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

4.8CVSS5.8AI score0.02338EPSS
SaveExploits5References3
Prion
Prion
added 2019/04/03 3:29 p.m.21 views

Cross site scripting

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

3.5CVSS4.8AI score0.02338EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2019/04/03 2:07 p.m.39 views

CVE-2019-10261

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

4.8AI score0.02338EPSS
SaveExploits5References3
CNVD
CNVD
added 2019/04/02 12:00 a.m.9 views

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14092)

CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.78, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...

4.8CVSS6.4AI score0.02338EPSS
SaveExploits5References1
Packet Storm
Packet Storm
added 2019/03/29 12:00 a.m.72 views

CentOS Web Panel 0.9.8.789 Cross Site Scripting

Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 28 - March - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: 0.9.8.789 Tested on: CentOS 7 CVE :...

5.2AI score0.02338EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2019/03/29 12:00 a.m.58 views

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting

Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 28 - March - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: 0.9.8.789 Tested on: CentOS 7 CVE :...

4.8CVSS5.1AI score0.02338EPSS
SaveExploits5
exploitpack
exploitpack
added 2019/03/29 12:00 a.m.69 views

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 28 - March - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software...

3.5CVSS5AI score0.02338EPSS
SaveExploits5
zdt
zdt
added 2019/03/29 12:00 a.m.58 views

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting Vulnerability

Exploit for linux platform in category web applications Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: 0.9.8.789 Tested on:...

5.5AI score0.02338EPSS
SaveExploits5
OSV
OSV
added 2019/03/26 4:29 p.m.6 views

CVE-2019-7646

CentOS-WebPanel.com aka CWP CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the addpackage module parameter...

4.8CVSS5.8AI score0.07115EPSS
SaveExploits5References3
NVD
NVD
added 2019/03/26 4:29 p.m.37 views

CVE-2019-7646

CentOS-WebPanel.com aka CWP CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the addpackage module parameter...

4.8CVSS4.9AI score0.07115EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2019/03/26 3:02 p.m.42 views

CVE-2019-7646

CentOS-WebPanel.com aka CWP CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the addpackage module parameter...

4.9AI score0.07115EPSS
SaveExploits5References3
Positive Technologies
Positive Technologies
added 2019/03/26 12:00 a.m.12 views

PT-2019-18679 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through 0.9.8.763 Description: The issue concerns a Stored/Persistent XSS vulnerability. It affects the add package module, specifically the Package Name field. This allows for potential exploitation via the module...

4.8CVSS4.8AI score0.07115EPSS
SaveExploits5References4
Rows per page
Query Builder