Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

45 records

Vendor: CentOS Web Panel Clear all filters
TI-2025-30935 CVE-2025-48703 · GHSA-vx2w-cj7g-8hcf

OS command injection in CentOS Web Panel

Priority CRITICAL 98KEV

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99655 Published 2025-09-19 Fixed in 0.9.8.1205 CWE-78
TI-2020-12303 CVE-2020-15628 · GHSA-whvm-7q6x-qjfp

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12302 CVE-2020-15627 · GHSA-5f52-jr7w-7384

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12301 CVE-2020-15626 · GHSA-vqp6-6prp-hrc9

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12300 CVE-2020-15625 · GHSA-cp9p-hq5q-j2j2

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12299 CVE-2020-15624 · GHSA-vhvc-pw37-prxw

SQL injection in CentOS Web Panel

Priority MEDIUM 40

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0401 Published 2020-07-28 No fix listed CWE-89
TI-2020-12297 CVE-2020-15622 · GHSA-cv7h-xc33-h73c

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12296 CVE-2020-15621 · GHSA-rwv9-24r7-rj8v

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12295 CVE-2020-15620 · GHSA-4qvr-wj3w-84g9

SQL injection in CentOS Web Panel

Priority MEDIUM 40

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0401 Published 2020-07-28 No fix listed CWE-89
TI-2020-12294 CVE-2020-15619 · GHSA-4hvx-mf9f-fvm7

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12293 CVE-2020-15618 · GHSA-m78r-2xpj-hgv8

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12292 CVE-2020-15617 · GHSA-jvxx-p9c4-49vp

SQL injection in CentOS Web Panel

Priority LOW 39

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0383 Published 2020-07-28 No fix listed CWE-89
TI-2020-12291 CVE-2020-15616 · GHSA-9jrr-pf6m-733r

SQL injection in CentOS Web Panel

Priority MEDIUM 40

This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0401 Published 2020-07-28 No fix listed CWE-89
TI-2020-12290 CVE-2020-15615 · GHSA-r77p-2f23-mhhj

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12289 CVE-2020-15614 · GHSA-3gcm-72hc-3mgw

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12288 CVE-2020-15613 · GHSA-2f8v-537v-w2fv

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12287 CVE-2020-15612 · GHSA-fjpq-pq25-m6g2

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08411 Published 2020-07-28 No fix listed CWE-78
TI-2020-12286 CVE-2020-15611 · GHSA-8r2q-w2q7-hvw9

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08316 Published 2020-07-28 No fix listed CWE-78
TI-2020-12285 CVE-2020-15610 · GHSA-8pph-cg3c-vgrv

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12284 CVE-2020-15609 · GHSA-h9cr-cxm7-hxwf

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12283 CVE-2020-15608 · GHSA-fv55-8v86-35rm

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12282 CVE-2020-15607 · GHSA-84v6-p2vg-wpmf

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12281 CVE-2020-15606 · GHSA-96wx-vrg4-pgm9

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08083 Published 2020-07-28 No fix listed CWE-78
TI-2020-12170 CVE-2020-15435 · GHSA-fxc2-mpj4-vqc6

OS command injection in CentOS Web Panel

Priority MEDIUM 53

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08411 Published 2020-07-28 No fix listed CWE-78
Load more