CentOS Web Panel

Records45All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

CentOS Web Panel records in CISA KEV

TI-2025-30935 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 98KEV 2025-11-04

Components

Products in the NVD configurations · select one to filter the records

Centos Web Panel 6 records MEDIUM

Records

45 records

TI-2025-30935 CVE-2025-48703 · GHSA-vx2w-cj7g-8hcf

OS command injection in CentOS Web Panel

CRITICAL 98KEV

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99655 Published 2025-09-19 Fixed in 0.9.8.1205 CWE-78

TI-2020-12298 CVE-2020-15623 · GHSA-4hcf-cp54-4wwx

This vulnerability allows remote attackers to write arbitrary files on affected…

MEDIUM 53

This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08335 Published 2020-07-28 No fix listed CWE-749

TI-2020-12290 CVE-2020-15615 · GHSA-r77p-2f23-mhhj

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12289 CVE-2020-15614 · GHSA-3gcm-72hc-3mgw

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12288 CVE-2020-15613 · GHSA-2f8v-537v-w2fv

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12287 CVE-2020-15612 · GHSA-fjpq-pq25-m6g2

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08411 Published 2020-07-28 No fix listed CWE-78

TI-2020-12286 CVE-2020-15611 · GHSA-8r2q-w2q7-hvw9

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08316 Published 2020-07-28 No fix listed CWE-78

TI-2020-12285 CVE-2020-15610 · GHSA-8pph-cg3c-vgrv

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12284 CVE-2020-15609 · GHSA-h9cr-cxm7-hxwf

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12283 CVE-2020-15608 · GHSA-fv55-8v86-35rm

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12282 CVE-2020-15607 · GHSA-84v6-p2vg-wpmf

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12281 CVE-2020-15606 · GHSA-96wx-vrg4-pgm9

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12170 CVE-2020-15435 · GHSA-fxc2-mpj4-vqc6

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08411 Published 2020-07-28 No fix listed CWE-78

TI-2020-12169 CVE-2020-15434 · GHSA-vr42-492c-9w56

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08411 Published 2020-07-28 No fix listed CWE-78

TI-2020-12168 CVE-2020-15433 · GHSA-6mq7-5q52-gp4x

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12167 CVE-2020-15432 · GHSA-42c7-vp37-g3hh

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12166 CVE-2020-15431 · GHSA-fvr8-fv39-5fg8

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12165 CVE-2020-15430 · GHSA-3c3r-frp2-2rrp

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12164 CVE-2020-15429 · GHSA-m98g-pgx5-r687

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08411 Published 2020-07-28 No fix listed CWE-78

TI-2020-12163 CVE-2020-15428 · GHSA-jgqc-8p4f-hvc8

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12162 CVE-2020-15427 · GHSA-fx8r-wvmm-c6qx

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12161 CVE-2020-15426 · GHSA-xm6f-m3fr-r7cj

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12160 CVE-2020-15425 · GHSA-797w-wc59-pw29

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12159 CVE-2020-15424 · GHSA-h93f-wp35-gcg6

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

TI-2020-12158 CVE-2020-15423 · GHSA-3pv5-7qjw-87p6

OS command injection in CentOS Web Panel

MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78

Open these records in search →