CVE-2023-42123

CVE-2023-42123 concerns the Control Web Panel where the vulnerable component is the mysql_manager module. The flaw arises from improper validation of a user-supplied string before it is used to execute a system command, enabling remote code execution with root privileges. Per the sources, exploit...

CVE-2023-42121 Control Web Panel Missing Authentication Remote Code Execution Vulnerability

Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-42121

CVE-2023-42121 concerns Control Web Panel (CWP) missing authentication in its web interface, enabling remote code execution with no privileges required. The flaw results from a lack of authentication before accessing functionality, allowing an attacker to execute code in the context of a valid CW...

CVE-2023-42121 Control Web Panel Missing Authentication Remote Code Execution Vulnerability

Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-42120

CVE-2023-42120 affects Control Web Panel via the dns_zone_editor module, where improper validation of a user-supplied string before a system call enables remote code execution with root privileges. Impact is high (RCE, root, network exploit) and requires authentication to exploit. The entry is co...

CVE-2023-42120 Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability

Control Web Panel dnszoneeditor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-42120 Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability

Control Web Panel dnszoneeditor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

Control Web Panel 安全漏洞

Control Web Panel is a Linux web hosting control panel. A security vulnerability exists in Control Web Panel that stems from a command injection remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affected installation...

Control Web Panel 安全漏洞

Control Web Panel is a Linux web hosting control panel. A security vulnerability exists in Control Web Panel that stems from a lack of authentication and a remote code execution vulnerability that allows remote attackers to execute arbitrary code on an affected installation...

Control Web Panel 安全漏洞

Control Web Panel is a Linux web hosting control panel. A security vulnerability exists in Control Web Panel that stems from a command injection remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affected installation...

Control Web Panel 安全漏洞

Control Web Panel is a Linux web hosting control panel. A security vulnerability exists in Control Web Panel that stems from the presence of a Command Injection Local Elevation of Privilege vulnerability that could allow a remote attacker to elevate privileges on an affected installation...

The vulnerability of the dns_zone_editor module of the Control Web Panel (CWP) application, which was previously known as CentOS Web Panel, allows a hacker to execute arbitrary code.

The vulnerability of the dnszoneeditor module of the Control Web Panel formerly CentOS Web Panel relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the mysql_manager module of the Control Web Panel (CWP) application, which is used for managing servers, as well as the Avast Premium Security antivirus protection, allows a malicious individual to escalate their privileges and execute arbitrary code.

The vulnerability of the mysqlmanager module of the Control Web Panel CWP application, which is used for managing servers, along with the Avast Premium Security antivirus protection, is related to deficiencies in access control within the isolated environment when processing special elements...

The vulnerability of the wloggui interface of the Control Web Panel (CWP) application (formerly CentOS Web Panel) allows a malicious user to escalate their privileges and execute arbitrary commands.

The vulnerability of the wloggui interface of the Control Web Panel CWP application formerly CentOS Web Panel is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...

The vulnerability in the web interface of the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Control Web Panel formerly CentOS Web Panel web interface relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

(0Day) Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the cwpsrv process...

PT-2023-5686 · Unknown · Control Web Panel

Name of the Vulnerable Software and Affected Versions: Control Web Panel CWP affected versions not specified Description: The issue is related to a lack of proper authentication in the web interface of Control Web Panel, allowing remote attackers to execute arbitrary code on affected installation...

PT-2023-5687 · Unknown · Control Web Panel

Name of the Vulnerable Software and Affected Versions: Control Web Panel affected versions not specified Description: The issue is related to the lack of proper validation of a user-supplied string before using it to execute a system call in the cwpsrv process, which listens on the loopback...

PT-2023-5685 · Unknown · Control Web Panel

Name of the Vulnerable Software and Affected Versions: Control Web Panel affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. The specific flaw exists within the dns zone editor module, resulting...

Control Web Panel 7 (CWP7) 0.9.8.1147 Remote Code Execution

// Exploit Title: Control Web Panel 7 CWP7 v0.9.8.1147 - Remote Code Execution RCE // Date: 2023-02-02 // Exploit Author: Mayank Deshmukh // Vendor Homepage: https://centos-webpanel.com/ // Affected Versions: version 0.9.8.1147 // Tested on: Kali Linux // CVE : CVE-2022-44877 // Github POC:...