Lucene search
K

4 matches found

OSV
OSV
added 2020/07/28 5:15 p.m.1 views

CVE-2020-15625

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxaddmailbox.php. When parsing the username parameter, the...

7.5CVSS7.1AI score
Exploits0References1
NVD
NVD
added 2020/07/28 5:15 p.m.8 views

CVE-2020-15625

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxaddmailbox.php. When parsing the username parameter, the...

7.8CVSS7.5AI score0.00571EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/07/28 5:1 p.m.14 views

CVE-2020-15625

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxaddmailbox.php. When parsing the username parameter, the...

7.5CVSS7.5AI score0.00571EPSS
Exploits0References1
CVE
CVE
added 2020/07/28 5:1 p.m.38 views

CVE-2020-15625

CVE-2020-15625 affects CentOS Web Panel (cwp-e17.0.9.8.923). The vulnerability resides in the ajax_add_mailbox.php component, where the username parameter is used to construct SQL queries without proper validation, enabling an unauthenticated attacker to disclose sensitive information in the cont...

7.8CVSS7.5AI score0.00571EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder