12873 matches found
CVE-2019-14913
An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...
CVE-2019-14913
PRiSE adAS 1.7.0 is affected by a persistent XSS in the administration panel due to log data not being properly escaped. Root cause: inadequate escaping in the logging path. Impact: XSS could affect users with access to the admin UI; exact exploit details, affected components, versions beyond 1.7...
CVE-2019-14725
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account...
CVE-2019-14725
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account...
CVE-2019-14724
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account...
CVE-2019-14724
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account...
Design/Logic Flaw
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account...
CVE-2019-14724
CVE-2019-14724 affects CentOS Web Panel version 0.9.8.851. The vulnerability is an insecure object reference that allows an attacker with an attacker account to edit the victim’s e‑mail forwarding destination. Root cause: improper access control on the object representing the e‑mail forwarding se...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32244)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove subdomains from an affected user's account...
CentOS Web Panel Input Validation Error Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove email forwarding destinations from an affected user's account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32248)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to delete an affected user's mail account...
PT-2019-13805 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue allows an attacker to modify the e-mail usage value of a victim's account using their own account, due to an insecure object reference. Recommendations: For version 0.9.8.851, at the...
CentOS Web Panel elevation of privilege vulnerability (CNVD-2019-32250)
CentOS Web Panel is a Linux web hosting control panel. An elevation of privilege vulnerability exists in CentOS Web Panel, which can be exploited by an attacker to change the value of an email exploit in an affected user account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32252)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to change the email password in an affected user account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32245)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CWP version 0.9.8.851, which arises from a network system or product that does not properly validate incoming data. No detailed vulnerability details are currently available...
CentOS Web Panel Elevation of Privilege Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. An elevation of privilege vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove targeted users from phpMyAdmin...
CentOS Web Panel elevation of privilege vulnerability (CNVD-2019-32249)
Control Web Panel is a Linux web hosting control panel. An elevation of privilege vulnerability exists in Control Web Panel, which can be exploited by an attacker to upload malicious software using the REST API...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32251)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to access and delete DNS records of affected users...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32243)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to add an email forwarding destination to an affected user's account...