CVE-2018-8898: Improper Authentication

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...

D-Link DSL-3782 - Authentication Bypass

D-Link DSL-3782 - Authentication Bypass Exploit Title: D-Link DSL 3782 - Authentication Bypass Vendor Homepage: https://eu.dlink.com Version: A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" Category: Webapps Exploit Author: Giulio Comi CVE : CVE-2018-8898 Dat...

D-Link DSL-3782 Authentication Bypass

Exploit Title: D-Link DSL 3782 - Authentication Bypass Vendor Homepage: https://eu.dlink.com Version: A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" Category: Webapps Exploit Author: Giulio Comi CVE : CVE-2018-8898 Date: 20/05/2018 Description The web panel ...

D-Link DSL-3782 - Authentication Bypass

Exploit Title: D-Link DSL 3782 - Authentication Bypass Vendor Homepage: https://eu.dlink.com Version: A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" Category: Webapps Exploit Author: Giulio Comi CVE : CVE-2018-8898 Date: 20/05/2018 Description The web panel ...

CentOS Web Panel 0.9.8.12 SQL Injection

Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22 Vulnerability Laboratory ID VL-ID:...

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2018-03251)

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in CentOS Web Panel 0.9.8.12 and earlier versions. A remote attacker can exploit this vulnerability by injecting script code into a client browser via the 'module' value of the index.php fi...

CentOS Web Panel Cross-Site Scripting Vulnerability

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in the index.php file in CentOS Web Panel 0.9.8.12 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the phpinieditor module or the...

CentOS Web Panel 0.9.8.12 - row_id / domain SQL Injection Vulnerability

Exploit for php platform in category web applications Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities Product & Service Introduction: =============================== CentOS Web Panel - Free Web Hosting control panel is designed for quick and easy...

CentOS Web Panel 0.9.8.12 - row_id domain SQL Injection

CentOS Web Panel 0.9.8.12 - rowid domain SQL Injection Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22...

CentOS Web Panel 0.9.8.12 - 'row_id' / 'domain' SQL Injection

Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22 Vulnerability Laboratory ID VL-ID:...

CVE-2018-5962

index.php in CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpinieditor module or the emailaddress parameter to the mailadd-new module...

CVE-2018-5961

CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...

Design/Logic Flaw

CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...

Code injection

index.php in CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpinieditor module or the emailaddress parameter to the mailadd-new module...

CVE-2018-5962

index.php in CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpinieditor module or the emailaddress parameter to the mailadd-new module...

CVE-2018-5962

CVE-2018-5962 affects CentOS Web Panel (CWP) up to version v0.9.8.12 via XSS in index.php. The vulnerability is triggered by the id parameter in the phpini_editor module or the email_address parameter in the mail_add-new module, allowing cross-site scripting. Public sources in connected records c...

CVE-2018-5961: Improper Neutralization of Input During Web Page Generation

CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...

PT-2018-17249 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through v0.9.8.12 Description: The issue concerns an XSS vulnerability via the module value of the "index.php" file. Recommendations: For versions through v0.9.8.12, as a temporary workaround, consider restricting...

PT-2018-17250 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through v0.9.8.12 Description: The issue concerns an XSS vulnerability. It can be exploited via the id parameter to the phpini editor module or the email address parameter to the mail add-new module in the index.php...

CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date:...