Design/Logic Flaw

CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...

Code injection

index.php in CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpinieditor module or the emailaddress parameter to the mailadd-new module...

CVE-2018-5962

CVE-2018-5962 affects CentOS Web Panel (CWP) up to version v0.9.8.12 via XSS in index.php. The vulnerability is triggered by the id parameter in the phpini_editor module or the email_address parameter in the mail_add-new module, allowing cross-site scripting. Public sources in connected records c...

CVE-2018-5962

index.php in CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpinieditor module or the emailaddress parameter to the mailadd-new module...

PT-2018-17250 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through v0.9.8.12 Description: The issue concerns an XSS vulnerability. It can be exploited via the id parameter to the phpini editor module or the email address parameter to the mail add-new module in the index.php...

CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date:...

CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date:...

PT-2018-17249 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through v0.9.8.12 Description: The issue concerns an XSS vulnerability via the module value of the "index.php" file. Recommendations: For versions through v0.9.8.12, as a temporary workaround, consider restricting...

CentOS Web Panel 0.9.8.12 - Multiple Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID:...

CentOS Web Panel 0.9.8.12 - Multiple Vulnerabilities

CentOS Web Panel 0.9.8.12 - Multiple Vulnerabilities Document Title: =============== CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 Release Date: ============= 2018-01-19...

CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities

Exploit for linux platform in category web applications Document Title: =============== CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities Vulnerability Class: ==================== Cross Site Scripting - Persistent Current Estimated Price: ======================== 1.000€ - 2.000...

CentOS Web Panel 0.9.8.12 Cross Site Scripting

Document Title: =============== CentOS Web Panel v0.9.8.12 - Non-Persistent Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1835 Release Date: ============= 2018-01-17 Vulnerability Laboratory ID VL-ID:...

CentOS Web Panel v0.9.8.12 - Non-Persistent Cross Site Scripting Vulnerabilities

Exploit for linux platform in category web applications Document Title: =============== CentOS Web Panel v0.9.8.12 - Non-Persistent Cross Site Scripting Vulnerabilities Vulnerability Class: ==================== Cross Site Scripting - Non Persistent Current Estimated Price: =======================...

CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5962 CVE-ID: ======= CVE-2018-5962 Release Date:...

CentOS Web Panel 0.9.8.12 Cross Site Scripting

Document Title: =============== CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID:...

CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5962 CVE-ID: ======= CVE-2018-5962 Release Date:...

CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1835 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5961 CVE-ID: ======= CVE-2018-5961 Release Date:...

CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1835 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5961 CVE-ID: ======= CVE-2018-5961 Release Date:...

Airtame HDMI dongle session fixation vulnerability

The AIRTAME HDMI dongle is a wireless access point product for connecting, sharing and split-screen TVs or monitors. A security vulnerability exists in the /bin/login.php file of the Web Panel in the Airtame HDMI dongle using firmware versions prior to 3.0. The vulnerability can be exploited by a...

CVE-2017-15304

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change...