2 matches found
Cross site scripting
Stored XSS in filemanager2.php in CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.885 exists via the cmdarg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim...
1.9CVSS4.4AI score0.00478EPSS
SaveExploits2References2Affected Software1
CVE-2019-16295: Improper Neutralization of Input During Web Page Generation
Stored XSS in filemanager2.php in CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.885 exists via the cmdarg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim...
4.6CVSS5.5AI score0.00478EPSS
SaveExploits2References2
20