CVE-2020-15618

The CVE-2020-15618 issue affects CentOS Web Panel (cwp-e17.0.9.8.923) and is a SQL injection in ajax_list_accounts.php triggered by the username parameter. It allows remote, unauthenticated attackers to disclose sensitive information in the root context. The vulnerability is documented by ZDI (ZD...