CW
Product
CentOS Web Panel
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 4Low 0
Watch
Add CentOS Web Panel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-14246 | 6.5 | Aug 21 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an… Affected: 0.9.8.851 |
| CVE-2019-14245 | 6.5 | Aug 21 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oauthv2) from the server via an attacker… Affected: 0.9.8.851 |
| CVE-2019-10893 | 4.8 | Apr 18 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP… Affected: 0.9.8.753; 0.9.8.793 |
| CVE-2019-10261 | 4.8 | Apr 3 | CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action Affected: 0.9.8.789 |
Showing 4