Login Request a demo
CO
Vendor
Control-webpanel
1 product with CVEs on record
85
CVEs
2
On KEV
0
New 30D
Products
WE
Webpanel
Control-webpanel
9.8
85 CVEs2 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-48703
In wildKEV
WE
Webpanel
Control-webpanel
9.0
100%
Sep 19CWP Control Web Panel OS Command Injection Vulnerability
CVE-2023-42123
WE
Webpanel
Control-webpanel
8.8
2%
May 3Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability
CVE-2023-42122
WE
Webpanel
Control-webpanel
7.8
1%
May 3Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability
CVE-2023-42121
WE
Webpanel
Control-webpanel
9.8
2%
May 3Control Web Panel Missing Authentication Remote Code Execution Vulnerability
CVE-2023-42120
WE
Webpanel
Control-webpanel
8.8
3%
May 3Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability
CVE-2022-44877
In wildKEV
WE
Webpanel
Control-webpanel
9.8
100%
Jan 5CWP Control Web Panel OS Command Injection Vulnerability
CVE-2021-45467
WE
Webpanel
Control-webpanel
9.8
71%
Dec 26In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as…
CVE-2021-45466
WE
Webpanel
Control-webpanel
9.8
55%
Dec 26In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the…
CVE-2022-25048
WE
Webpanel
Control-webpanel
8.8
20%
Jul 7Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user
CVE-2022-25047
WE
Webpanel
Control-webpanel
5.9
2%
Jul 7The password reset token in CWP v0.9.8.1126 is generated using known or predictable values
CVE-2022-25046
WE
Webpanel
Control-webpanel
9.8
57%
Jul 7A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request
CVE-2021-31324
WE
Webpanel
Control-webpanel
9.8
35%
May 18The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution
CVE-2021-31316
WE
Webpanel
Control-webpanel
9.8
13%
May 18The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter
CVE-2020-15628
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15627
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15626
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15625
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15624
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15623
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15622
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15621
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15620
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15619
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15618
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15617
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15616
WE
Webpanel
Control-webpanel
7.5
4%
Jul 28This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15615
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15614
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15613
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15612
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15611
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15610
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15608
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15607
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15606
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15435
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15434
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15433
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15432
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15431
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15430
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15429
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15428
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15427
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15426
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15425
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15424
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15423
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15422
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15421
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923
CVE-2020-15420
WE
Webpanel
Control-webpanel
9.8
8%
Jul 28This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891
CVE-2020-10230
WE
Webpanel
Control-webpanel
9.8
16%
Mar 16CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter
CVE-2019-15235
WE
Webpanel
Control-webpanel
6.5
1%
Dec 17CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/[USERNAME]/tmp/session/sess_xxxxxx, and the victim's…
CVE-2019-14782
WE
Webpanel
Control-webpanel
6.5
1%
Dec 17CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token…
CVE-2019-16295
WE
Webpanel
Control-webpanel
4.6
0%
Oct 31Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter
CVE-2019-14725
WE
Webpanel
Control-webpanel
4.3
1%
Sep 11In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker…
CVE-2019-14724
WE
Webpanel
Control-webpanel
7.5
4%
Sep 11In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an…
CVE-2019-14730
WE
Webpanel
Control-webpanel
4.3
2%
Sep 10In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account
CVE-2019-14729
WE
Webpanel
Control-webpanel
4.3
2%
Sep 10In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via an attacker account
CVE-2019-14728
WE
Webpanel
Control-webpanel
4.3
2%
Sep 10In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victim's account via an…