CentOS Web Panel vulnerabilities
1 known vulnerability in CentOS Web Panel from Centos-webpanel. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
1exploited
9.0average CVSS score
Latest first
- 9.0 Critical severity
CWP Control Web Panel OS Command Injection Exploited
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.