1170 matches found
Design/Logic Flaw
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account...
CVE-2019-14724
CVE-2019-14724 affects CentOS Web Panel version 0.9.8.851. The vulnerability is an insecure object reference that allows an attacker with an attacker account to edit the victim’s e‑mail forwarding destination. Root cause: improper access control on the object representing the e‑mail forwarding se...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32244)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove subdomains from an affected user's account...
CentOS Web Panel Input Validation Error Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove email forwarding destinations from an affected user's account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32248)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to delete an affected user's mail account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32245)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CWP version 0.9.8.851, which arises from a network system or product that does not properly validate incoming data. No detailed vulnerability details are currently available...
CentOS Web Panel elevation of privilege vulnerability (CNVD-2019-32250)
CentOS Web Panel is a Linux web hosting control panel. An elevation of privilege vulnerability exists in CentOS Web Panel, which can be exploited by an attacker to change the value of an email exploit in an affected user account...
CentOS Web Panel Elevation of Privilege Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. An elevation of privilege vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove targeted users from phpMyAdmin...
PT-2019-13805 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue allows an attacker to modify the e-mail usage value of a victim's account using their own account, due to an insecure object reference. Recommendations: For version 0.9.8.851, at the...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32252)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to change the email password in an affected user account...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32251)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to access and delete DNS records of affected users...
CentOS Web Panel elevation of privilege vulnerability (CNVD-2019-32249)
Control Web Panel is a Linux web hosting control panel. An elevation of privilege vulnerability exists in Control Web Panel, which can be exploited by an attacker to upload malicious software using the REST API...
CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32243)
CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to add an email forwarding destination to an affected user's account...
CVE-2019-14730
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account...
CVE-2019-14723
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a victim's e-mail account via an attacker account...
CVE-2019-14726
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's account via an attacker account...
CVE-2019-14729
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via an attacker account...
CVE-2019-14726
In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's account via an attacker account...