CVE-2014-9614

The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/...

PT-2020-7784

Name of the Vulnerable Software and Affected Versions: Netsweeper versions prior to 4.0.5 Description: The issue concerns a default password set for the branding account in the Web Panel, making it easier for remote attackers to gain access. This can be achieved by sending a request to the...

CVE-2014-9614: Use of Hard-coded Credentials

The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/...

PT-2020-6770 · Unknown · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions cwp-e17.0.9.8.923 Description: The issue is related to the implementation of the ajax mod security.php script in CentOS Web Panel, where the archivo parameter does not properly neutralize special elements in...

CentOS Web Panel Input Validation Subdomain Deletion

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to delete a subdomain from a user’s account remotely...

CentOS Web Panel Auth Bypass

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely change the user’s email account password...

CentOS Web Panel Privilege Escalation

The vulnerability of the cwpsrv-xxx cookie file in the CentOS Web Panel application management server application is related to the unlimited download of dangerous files. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level remotely...

CentOS Web Panel Privilege Escalation

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to delete the user’s email account remotely...

CentOS Web Panel Access Disclosure

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the DNS records of the user account...

CentOS Web Panel Input Validation Email Redirection

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to add an email address for email redirection to a user account...

CentOS Web Panel Arbitrary Action

The vulnerability of the “Forgot Password” function in the CentOS Web Panel server management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device remotely...

CentOS Web Panel Privilege Escalation

The vulnerability of the CentOS Web Panel administration application is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root through the email address list page...

CentOS Web Panel Auth Bypass Privilege Escalation

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

CentOS Web Panel Info Disclosure

The vulnerability of the CentOS Web Panel administration application lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

CentOS Web Panel Auth Bypass Privilege Escalation

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

filemanager2.php Code Execution

The vulnerability of the filemanager2.php component of the CentOS Web Panel management application relates to the lack of measures for sanitizing input data. Exploiting this vulnerability could allow an attacker to execute arbitrary HTML code or JavaScript scripts...

CentOS Web Panel Password Disclosure Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A password disclosure vulnerability exists in CentOS Web Panel. An attacker can exploit this vulnerability to disclose passwords...

CentOS Web Panel Password Disclosure Vulnerability (CNVD-2019-46765)

CentOS Web Panel CWP is a free web hosting control panel. A password disclosure vulnerability exists in CentOS Web Panel, which can be exploited by an attacker to disclose passwords...

CVE-2019-15235

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/USERNAME/tmp/session/sessxxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to gain access to the victim's password for the OS and...

CVE-2019-14782

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/accesslog, then use them to make a request to extract the victim's password for the OS...