CE
Vendor
centos-webpanel
7
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-48703 In wildKEV | CW CentOS Web Panel centos-webpanel | 9.0 | Sep 19 | CWP Control Web Panel OS Command Injection Vulnerability |
| CVE-2020-15609 | CW Centos Web Panel Centos-webpanel | 9.8 | Jul 28 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923 |
| CVE-2019-14246 | CW Centos Web Panel Centos-webpanel | 6.5 | Aug 21 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an… |
| CVE-2019-14245 | CW Centos Web Panel Centos-webpanel | 6.5 | Aug 21 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oauthv2) from the server via an attacker… |
| CVE-2019-13386 | CW Centos Web Panel Centos-webpanel | 8.8 | Jul 26 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shell command, i.e., obtain a reverse… |
| CVE-2019-10893 | CW Centos Web Panel Centos-webpanel | 4.8 | Apr 18 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP… |
| CVE-2019-10261 | CW Centos Web Panel Centos-webpanel | 4.8 | Apr 3 | CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action |