PT-2020-6770 · Unknown · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions cwp-e17.0.9.8.923 Description: The issue is related to the implementation of the ajax mod security.php script in CentOS Web Panel, where the archivo parameter does not properly neutralize special elements in...

The vulnerability of the cwpsrv-xxx cookie file in the CentOS Web Panel application allows a hacker to elevate their privileges to the root level.

The vulnerability of the cwpsrv-xxx cookie file in the CentOS Web Panel application management server application is related to the unlimited download of dangerous files. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level remotely...

The vulnerability in the server management application CentOS Web Panel arises due to insufficient validation of input data. This allows a malicious individual to delete a user’s email account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to delete the user’s email account remotely...

The vulnerability in the CentOS Web Panel server management application arises from insufficient validation of input data. This allows attackers to gain access to the DNS records associated with the user account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the DNS records of the user account...

The vulnerability in the CentOS Web Panel server management application exists due to insufficient validation of input data. This allows a malicious actor to add an email address for email redirection to a user account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to add an email address for email redirection to a user account...

The vulnerability of the server management application CentOS Web Panel arises due to insufficient validation of input data. This allows a hacker to change the email password of the user account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely change the user’s email account password...

The vulnerability of the CentOS Web Panel application for managing servers arises from insufficient validation of input data. This allows a malicious individual to delete a subdomain from a user account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to delete a subdomain from a user’s account remotely...

The vulnerability of the server management application for CentOS Web Panel lies in the lack of protection for operational data, allowing attackers to disclose sensitive information.

The vulnerability of the CentOS Web Panel administration application lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of the server management application for CentOS Web Panel stems from authentication procedures that have flaws, allowing attackers to escalate their privileges.

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of the server management application for CentOS Web Panel lies in the lack of security measures for the web page structure, allowing attackers to elevate their privileges to the root level.

The vulnerability of the CentOS Web Panel administration application is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root through the email address list page...

The vulnerability of the “Forgot Password” function in the server management application CentOS Web Panel allows a hacker to perform arbitrary actions on a vulnerable device.

The vulnerability of the “Forgot Password” function in the CentOS Web Panel server management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device remotely...

The vulnerability of the server management application for CentOS Web Panel stems from authentication procedures that have flaws, allowing attackers to escalate their privileges.

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the filemanager2.php component of the CentOS Web Panel management application allows a hacker to execute arbitrary HTML code or JavaScript scripts.

The vulnerability of the filemanager2.php component of the CentOS Web Panel management application relates to the lack of measures for sanitizing input data. Exploiting this vulnerability could allow an attacker to execute arbitrary HTML code or JavaScript scripts...

CentOS Web Panel Password Disclosure Vulnerability (CNVD-2019-46765)

CentOS Web Panel CWP is a free web hosting control panel. A password disclosure vulnerability exists in CentOS Web Panel, which can be exploited by an attacker to disclose passwords...

CentOS Web Panel Password Disclosure Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A password disclosure vulnerability exists in CentOS Web Panel. An attacker can exploit this vulnerability to disclose passwords...

CVE-2019-14782

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to make a request to extract the victim's password for the OS...

CVE-2019-15235

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/USERNAME/tmp/session/sessxxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to gain access to the victim's password for the OS and...

CVE-2019-15235

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/USERNAME/tmp/session/sessxxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to gain access to the victim's password for the OS and...

CVE-2019-14782

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to make a request to extract the victim's password for the OS...

Cross site request forgery (csrf)

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to make a request to extract the victim's password for the OS...