1174 matches found
CVE-2019-11429
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version, 0.9.8.753 Pro and 0.9.8.807 Pro is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions "Add DNS Zone" screen...
PT-2019-12308 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions 0.9.8.753 through 0.9.8.807, 0.9.8.793 Description: The issue concerns a Reflected XSS vulnerability related to the "Domain" field on the "DNS Functions Add DNS Zone" screen. Recommendations: For versions 0.9.8.753...
CentOS Web Panel 0.9.8.793 (Free) / v0.9.8.753 (Pro) / 0.9.8.807 (Pro) - Domain Field (Add DNS Zone) Cross-Site Scripting
Exploit Title: CentOS Web Panel - Domain Field Add DNS Zone Cross-Site Scripting Vulnerability Google Dork: N/A Date: 22 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free, v0.9.8.753 Pro and 0.9.8.807...
CentOS Web Panel 0.9.8.793 (Free) v0.9.8.753 (Pro) 0.9.8.807 (Pro) - Domain Field (Add DNS Zone) Cross-Site Scripting
CentOS Web Panel 0.9.8.793 Free v0.9.8.753 Pro 0.9.8.807 Pro - Domain Field Add DNS Zone Cross-Site Scripting Exploit Title: CentOS Web Panel - Domain Field Add DNS Zone Cross-Site Scripting Vulnerability Google Dork: N/A Date: 22 - April - 2019 Exploit Author: DKM Vendor Homepage:...
CentOS Web Panel Domain Field Cross Site Scripting
Exploit Title: CentOS Web Panel - Domain Field Add DNS Zone Cross-Site Scripting Vulnerability Google Dork: N/A Date: 22 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free, v0.9.8.753 Pro and 0.9.8.807...
CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14584)
CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in the email field in CWP versions 0.9.8.793 Free and 0.9.8.753 Pro, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit this...
Design/Logic Flaw
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...
CVE-2019-10893
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...
CVE-2019-10893
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...
CVE-2019-10893
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.793 Free/Open Source Version and 0.9.8.753 Pro is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload wi...
Authentication flaw
An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System IUMS allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel TWP User ID or Password field. If exploited, the attackers could perform any action...
CVE-2019-11196
An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System IUMS allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel TWP User ID or Password field. If exploited, the attackers could perform any action...
CVE-2019-11196
Technical details about CVE-2019-11196 are not publicly provided in the connected documents. Monitor for updates from Red Hat/NVD/CVE listings for affected products, remediation, and exact impact information.
CVE-2019-11196
An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System IUMS allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel TWP User ID or Password field. If exploited, the attackers could perform any action...
The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.
The vulnerability of the application for managing CentOS Web Panel servers admin/index.php?module=sendssh is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.
The vulnerability of the administration application for CentOS Web Panel admin/index.php?module=rootpwd is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.c...
CentOS Web Panel 0.9.8.793 (Free) 0.9.8.753 (Pro) - Cross-Site Scripting
CentOS Web Panel 0.9.8.793 Free 0.9.8.753 Pro - Cross-Site Scripting Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com...
CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) Cross Site Scripting
Exploit Title: CentOS Web Panel v0.9.8.793 Free and v0.9.8.753 Pro - Email Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 06 - April - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: v0.9.8.793 Free an...