1311 matches found
CVE-2018-18323
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fileeditor&file=/../ URI...
CVE-2018-18324
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...
CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-18497)
CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.480, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of multiple parameters...
CentOS Web Panel Local File Inclusion Vulnerability
CentOS Web Panel is a CentOS Lnuix system administration panel. A local file inclusion vulnerability exists in CentOS Web Panel 0.9.8.480, which can be exploited to achieve local file inclusion by traversing the directory via the admin/index.php?module=fileeditor&file=/... / URI for directory...
Centos Web Panel 0.9.8.480 XSS / LFI / Code Execution
Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber GA1/4venlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requirements Version: 0.9.8.480 Tested on: Centos 7...
CVE-2018-18324: Improper Neutralization of Input During Web Page Generation
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...
PT-2018-14405 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.480 Description: The issue concerns Command Injection via shell metacharacters in the admin/index.php API endpoint, specifically in the service start, service restart, service fullstatus, or service stop...
CVE-2018-18323: Improper Limitation of a Pathname to a Restricted Directory
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fileeditor&file=/../ URI...
CVE-2018-18322: Improper Neutralization of Special Elements used in an OS Command
CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php servicestart, servicerestart, servicefullstatus, or servicestop parameter...
CentOS Web Panel Command Injection Vulnerability
CentOS Web Panel is a CentOS Lnuix system administration panel. A command injection vulnerability exists in CentOS Web Panel version 0.9.8.480. No details of the vulnerability are provided at this time...
PT-2018-14406 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.480 Description: The issue concerns a Local File Inclusion vulnerability via directory traversal. This can be exploited through the "/admin/index.php?module=file editor&file=/../" URI, which allows access to...
Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities
Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requiremen...
PT-2018-14407 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.480 Description: The issue concerns a Cross-Site Scripting XSS problem. It affects the fm current dir parameter in the "admin/fileManager2.php" endpoint, as well as the module, service start, service fullstatus,...
Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities
Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requirements Version: 0.9.8.480 Tested on: Centos 7 Vulnerabilit...
CentOS Web Panel 0.9.8.480 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Centos Web Panel 0.9.8.480 Multiple Vulnerabilities Exploit Author: Seccops - Siber Güvenlik Hizmetleri https://seccops.com Vendor Homepage: http://centos-webpanel.com/ Software Link: http://centos-webpanel.com/system-requiremen...
Videoplay V 1.3.0 Backdoor Account Vulnerability
Videoplay is a video playback testing software Security exists in Videoplay. The vulnerability is due to a backdoor program that grants an attacker access to the device's web panel, leading the attacker to use the account to execute certain parameters...
CVE-2018-8898
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...
Authentication flaw
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...
CVE-2018-8898
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...
CVE-2018-8898: Improper Authentication
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...