WE
Product
Webpanel
On CISA KEVExploited in the wild
85
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 23Medium 25Low 0
Watch
Add Webpanel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-42123 | 8.8 | May 3 | Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability Affected: 0.9.8.1152 |
| CVE-2023-42120 | 8.8 | May 3 | Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability Affected: 0.9.8.1152 |
| CVE-2022-25048 | 8.8 | Jul 7 | Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user Affected: 0.9.8.1126 |
| CVE-2019-13477 | 8.8 | Aug 21 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account Affected: 0.9.8.837 |
| CVE-2019-13605 | 8.8 | Jul 16 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid… Affected: 0.9.8.836 |
| CVE-2018-18773 | 8.8 | Nov 20 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by changing the root password Affected: through 0.9.8.740 |
| CVE-2018-18772 | 8.8 | Nov 20 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as demonstrated by executing an arbitrary OS command Affected: through 0.9.8.740 |
| CVE-2023-42122 | 7.8 | May 3 | Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability Affected: 0.9.8.1152 |
| CVE-2020-15628 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15627 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15626 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15625 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15624 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15622 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15621 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15620 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15619 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15618 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15617 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15616 | 7.5 | Jul 28 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2019-14724 | 7.5 | Sep 11 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an… Affected: 0.9.8.851 |
| CVE-2019-13359 | 7.5 | Jul 16 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to… Affected: 0.9.8.836 |
| CVE-2018-18323 | 7.5 | Oct 15 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI Affected: 0.9.8.480 |
Showing 23