Skip to content
Noroxi

control-webpanel records

85 published records for vendor control-webpanel.

Researcher profile

Entered KEV
2 · 2.4%
Weaponized
2 · 2.4%
Pre-auth RCE
32
With a fix record
0%
Median publish → KEV
29 days

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

85 records
  • CVE-2022-44877
    99Now

    login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS comma

    CriticalCVSS 9.8KEVWeaponizedEPSS 100%

    control-webpanel · webpanelJan 5, 2023

  • CVE-2025-48703
    96Now

    CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in t

    CriticalCVSS 9.0KEVWeaponizedEPSS 100%

    control-webpanel · webpanelSep 19, 2025

  • CVE-2021-45467
    60This week

    In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.ph

    CriticalCVSS 9.8Proof of conceptEPSS 71%

    control-webpanel · webpanelDec 26, 2022

  • CVE-2022-25046
    56Plan

    A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.

    CriticalCVSS 9.8No exploitEPSS 57%

    control-webpanel · webpanelJul 7, 2022

  • CVE-2021-45466
    56Plan

    In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to a

    CriticalCVSS 9.8No exploitEPSS 55%

    control-webpanel · webpanelDec 26, 2022

  • CVE-2018-18323
    51Plan

    CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fil

    HighCVSS 7.5Proof of conceptEPSS 71%

    control-webpanel · webpanelOct 15, 2018

  • CVE-2021-31324
    49Plan

    The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    control-webpanel · webpanelMay 18, 2021

  • CVE-2019-13360
    46Plan

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging k

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    control-webpanel · webpanelJul 16, 2019

  • CVE-2020-10230
    44Plan

    CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php t

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    control-webpanel · webpanelMar 16, 2020

  • CVE-2018-18322
    44Plan

    CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start

    CriticalCVSS 9.8Proof of conceptEPSS 15%

    control-webpanel · webpanelOct 15, 2018

  • CVE-2021-31316
    43Plan

    The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    control-webpanel · webpanelMay 18, 2021

  • CVE-2020-15429
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15435
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15612
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15434
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15422
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15623
    42Plan

    This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2022-25048
    41Plan

    Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.

    HighCVSS 8.8No exploitEPSS 20%

    control-webpanel · webpanelJul 7, 2022

  • CVE-2020-15611
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15420
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15425
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15428
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15430
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15431
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2020-15426
    41Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020