Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Control-webpanelWebpanel

14 matches found

CVE
CVE•added 2018/10/15 7:29 a.m.•53 views

CVE-2018-18323

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.

7.5CVSS7.5AI score0.79349EPSS
CVE
CVE•added 2019/09/11 12:15 p.m.•45 views

CVE-2019-14724

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.

7.5CVSS7.4AI score0.09681EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•44 views

CVE-2020-15619

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the type parameter, the pr...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•35 views

CVE-2020-15620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id parameter, the proc...

7.8CVSS7.4AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•35 views

CVE-2020-15624

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the domain parameter, the pr...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•35 views

CVE-2020-15627

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the account parameter, th...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•33 views

CVE-2020-15617

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the status parameter, the ...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•33 views

CVE-2020-15621

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the email parameter, the ...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•32 views

CVE-2020-15618

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username parameter, th...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•32 views

CVE-2020-15622

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the search parameter, the...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•32 views

CVE-2020-15628

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the user parameter, the p...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•30 views

CVE-2020-15616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the package parameter, the...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•28 views

CVE-2020-15625

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_add_mailbox.php. When parsing the username parameter, the ...

7.8CVSS7.5AI score0.01095EPSS
CVE
CVE•added 2020/07/28 5:15 p.m.•28 views

CVE-2020-15626

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the term parameter, the proces...

7.8CVSS7.5AI score0.01095EPSS