RSS   Vulnerabilities for 'Webpanel'   RSS

2022-07-07
 
CVE-2022-25046

CWE-22
 

 
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.

 
 
CVE-2022-25047

CWE-330
 

 
The password reset token in CWP v0.9.8.1126 is generated using known or predictable values.

 
 
CVE-2022-25048

CWE-78
 

 
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.

 


Copyright 2024, cxsecurity.com

 

Back to Top