Browse CVEs

CRITICAL 9.0 CVE-2025-48703 KEVEPSS 100% CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_tota… Webpanel 0.9.8.1205+ Fix from $2,3002025-09-19 CRITICAL 9.8 CVE-2023-42121 Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… Webpanel Mitigation only Fix from $2,3002024-05-03 HIGH 8.8 CVE-2023-42123 Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… Webpanel Mitigation only Fix from $1,9502024-05-03 HIGH 7.8 CVE-2023-42122 Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privilege… Webpanel Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-42120 Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… Webpanel Mitigation only Fix from $1,9502024-05-03 CRITICAL 9.8 CVE-2022-44877 KEVEPSS 100% login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via s… Webpanel 0.9.8.1147+ Fix from $2,3002023-01-05 CRITICAL 9.8 CVE-2021-45466EPSS 55% In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an aut… Webpanel 0.9.8.1107+ Fix from $2,3002022-12-26 CRITICAL 9.8 CVE-2021-45467EPSS 71% In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to regi… Webpanel 0.9.8.1107+ Fix from $2,3002022-12-26 CRITICAL 9.8 CVE-2022-25046EPSS 56% A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request. Webpanel after 0.9.8.1124 Fix from $2,3002022-07-07 HIGH 8.8 CVE-2022-25048EPSS 19% Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user. Webpanel No fix yet Fix from $1,9502022-07-07 MEDIUM 5.9 CVE-2022-25047 The password reset token in CWP v0.9.8.1126 is generated using known or predictable values. Webpanel No fix yet Fix from $1,6002022-07-07 CRITICAL 9.8 CVE-2021-31316EPSS 13% The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter. Webpanel No fix yet Fix from $2,3002021-05-18 CRITICAL 9.8 CVE-2021-31324EPSS 34% The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. Webpanel No fix yet Fix from $2,3002021-05-18 CRITICAL 9.8 CVE-2020-15623EPSS 8% This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication i… Webpanel Mitigation only Fix from $2,3002020-07-28 HIGH 7.5 CVE-2020-15621 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15622 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15624 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15625 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15626 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15627 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15628 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 CRITICAL 9.8 CVE-2020-15608EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 CRITICAL 9.8 CVE-2020-15610EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 CRITICAL 9.8 CVE-2020-15611EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 CRITICAL 9.8 CVE-2020-15612EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 CRITICAL 9.8 CVE-2020-15613EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 CRITICAL 9.8 CVE-2020-15614EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 CRITICAL 9.8 CVE-2020-15615EPSS 8% This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication … Webpanel Mitigation only Fix from $2,3002020-07-28 HIGH 7.5 CVE-2020-15616 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28 HIGH 7.5 CVE-2020-15617 This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authent… Webpanel Mitigation only Fix from $1,9502020-07-28