WE
Product
Webpanel
On CISA KEVExploited in the wild
85
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 23Medium 25Low 0
Watch
Add Webpanel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-44877 In wildKEV | 9.8 | Jan 5 | CWP Control Web Panel OS Command Injection Vulnerability Affected: before 0.9.8.1147 |
| CVE-2025-48703 In wildKEV | 9.0 | Sep 19 | CWP Control Web Panel OS Command Injection Vulnerability Affected: before 0.9.8.1205 |
| CVE-2023-42121 | 9.8 | May 3 | Control Web Panel Missing Authentication Remote Code Execution Vulnerability Affected: 0.9.8.1152 |
| CVE-2021-45467 | 9.8 | Dec 26 | In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as… Affected: before 0.9.8.1107 |
| CVE-2021-45466 | 9.8 | Dec 26 | In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the… Affected: before 0.9.8.1107 |
| CVE-2022-25046 | 9.8 | Jul 7 | A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request Affected: through 0.9.8.1124 |
| CVE-2021-31324 | 9.8 | May 18 | The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution Affected: All versions, or not specified |
| CVE-2021-31316 | 9.8 | May 18 | The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter Affected: All versions, or not specified |
| CVE-2020-15623 | 9.8 | Jul 28 | This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15615 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15614 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15613 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15612 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15611 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15610 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15608 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15607 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15606 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15435 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15434 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15433 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15432 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15431 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15430 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15429 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15428 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15427 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15426 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15425 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15424 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15423 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15422 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15421 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 Affected: 0.9.8.923 |
| CVE-2020-15420 | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891 Affected: 0.9.8.891 |
| CVE-2020-10230 | 9.8 | Mar 16 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter Affected: All versions, or not specified |
| CVE-2019-13360 | 9.8 | Jul 16 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username Affected: 0.9.8.836 |
| CVE-2018-18322 | 9.8 | Oct 15 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus,… Affected: 0.9.8.480 |
Showing 37