centos-webpanel kayıtları

centos-webpanel üreticisine ait 6 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

6 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
41Planlayın	CVE-2020-15609İstismar yok	This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.centos-webpanel · centos web panel · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%8,0	28 Tem 2020
36İzleyin	CVE-2019-13386İstismar yok	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shecentos-webpanel · centos web panel · CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%2,8	26 Tem 2019
27İzleyin	CVE-2019-14246İstismar yok	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwordcentos-webpanel · centos web panel · CWE-639 Erişim denetimi (IDOR)	Orta6,5	—	%2,2	21 Ağu 2019
27İzleyin	CVE-2019-14245İstismar yok	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oacentos-webpanel · centos web panel · CWE-639 Erişim denetimi (IDOR)	Orta6,5	—	%1,8	21 Ağu 2019
20İzleyin	CVE-2019-10893Kavram kanıtı	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent Xcentos-webpanel · centos web panel · CWE-79 XSS	Orta4,8	—	%2,8	18 Nis 2019
20İzleyin	CVE-2019-10261Kavram kanıtı	CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functicentos-webpanel · centos web panel · CWE-79 XSS	Orta4,8	—	%2,3	3 Nis 2019

CVE-2020-15609
41Planlayın
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.
KritikCVSS 9,8İstismar yokEPSS %8
- Girişsiz RCE
- Komut enjeksiyonu
centos-webpanel · centos web panel28 Tem 2020
CVE-2019-13386
36İzleyin
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a she
YüksekCVSS 8,8İstismar yokEPSS %2
- Erişim denetimi (IDOR)
centos-webpanel · centos web panel26 Tem 2019
CVE-2019-14246
27İzleyin
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin password
OrtaCVSS 6,5İstismar yokEPSS %2
- Erişim denetimi (IDOR)
centos-webpanel · centos web panel21 Ağu 2019
CVE-2019-14245
27İzleyin
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oa
OrtaCVSS 6,5İstismar yokEPSS %1
- Erişim denetimi (IDOR)
centos-webpanel · centos web panel21 Ağu 2019
CVE-2019-10893
20İzleyin
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent X
OrtaCVSS 4,8Kavram kanıtıEPSS %2
- XSS
centos-webpanel · centos web panel18 Nis 2019
CVE-2019-10261
20İzleyin
CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functi
OrtaCVSS 4,8Kavram kanıtıEPSS %2
- XSS
centos-webpanel · centos web panel3 Nis 2019