# Exploit Title: CWP (CentOS Control Web Panel) Store Cross Site Scripting # Date: 25 Oct 2019 # Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak # Vendor Homepage: https://control-webpanel.com/ # Version: 0.9.8.885 # CVE : CVE-2019-16295 +++++++++++++++++++++++++++++++++ # Description: +++++++++++++++++++++++++++++++++ User can add XSS payload in Directory Name , Filename , file extension in function "File Manager" +++++++++++++++++++++++++++++++++ # Steps to Reproduce +++++++++++++++++++++++++++++++++ 1. In user panel go to File Management --> File Manager 2. Go to "Create Directory" or "Create File" and insert XSS payload "<img src=x onerror=javascript&colon;alert&lpar;document&period;cookie&rpar;>" 3. XSS will trigger. +++++++++++++++++++++++++++++++++ # PoC +++++++++++++++++++++++++++++++++ https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-16295.md +++++++++++++++++++++++++++++++++ # Timeline +++++++++++++++++++++++++++++++++ 2019-07-19: Discovered the bug 2019-07-19: Reported to vendor 2019-07-23: Vender accepted the vulnerability 2019-10-23: The vulnerability has been fixed 2019-10-25: Advisory published +++++++++++++++++++++++++++++++++ # Discovered by +++++++++++++++++++++++++++++++++ Pongtorn Angsuchotmetee Nissana Sirijirakal Narin Boonwasanarak