CentOS Control Web Panel 0.9.8.846 Cross Site Scripting Vulnerability

Exploit for linux platform in category web applications Exploit Title: CWP CentOS Control Web Panel Reflected Cross Site Scripting Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak Vendor Homepage: https://control-webpanel.com/ Version: 0.9.8.846 Tested on: CentOS...

CentOS-WebPanel.com Control Web Panel 0.9.8.846 Cross Site Scripting

Exploit Title: CWP CentOS Control Web Panel Reflected Cross Site Scripting Date: 23 July 2019 Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak Vendor Homepage: https://control-webpanel.com/ Version: 0.9.8.846 Tested on: CentOS 7.6.1810 Core FireFox 68.0.1 64-bit C...

CVE-2019-13387

CVE-2019-13387 affects CentOS Web Panel (CWP) 0.9.8.846. Description: Reflected XSS in filemanager2.php via the fm_current_dir parameter allows an attacker to steal cookies/sessions or redirect users to phishing pages. Public writeups and exploits (e.g., 0day/PacketStorm) demonstrate the vulnerab...