Centos Web Panel Security Vulnerabilities and Issues — Centos Web Panel CVE List

Lucene search

Centos-webpanelCentos Web Panel

5 matches found

CVE•added 2019/07/26 1:15 p.m.•324 views

CVE-2019-13386

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shell command, i.e., obtain a reverse shell with user privilege.

8.8CVSS8.6AI score0.00748EPSS

CVE•added 2019/04/18 8:29 p.m.•54 views

CVE-2019-10893

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings > "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS P...

4.8CVSS4.9AI score0.00458EPSS

CVE•added 2019/04/03 3:29 p.m.•53 views

CVE-2019-10261

CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.

4.8CVSS4.8AI score0.00387EPSS

CVE•added 2019/08/21 7:15 p.m.•38 views

CVE-2019-14245

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oauthv2) from the server via an attacker account.

6.5CVSS6.4AI score0.00397EPSS

CVE•added 2019/08/21 7:15 p.m.•35 views

CVE-2019-14246

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account.

6.5CVSS6.4AI score0.00732EPSS