GCVE - cpe:2.3:a:control-webpanel:webpanel:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:control-webpanel:webpanel:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Control Webpanel (`3d61e022-bd40-5c1f-9d78-0c52e5ce5272`)
Product	Webpanel (`2e729440-b973-55b7-97c0-8a313d6c8d51`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-31324`	vulnerable	2026-06-08 05:31:52.344730	Details available The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. Published: 2021-05-18T19:43:15.000Z Updated: 2024-08-03T22:55:53.473Z Open on db.gcve.eu Reference links https://www.shielder.it/advisories/centos-web-panel-idsession-root-rce/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31316`	vulnerable	2026-06-08 05:31:52.341375	Details available The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter. Published: 2021-05-18T19:44:58.000Z Updated: 2024-08-03T22:55:53.563Z Open on db.gcve.eu Reference links https://www.shielder.it/advisories/centos-web-panel-idsession-root-rce/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10230`	vulnerable	2026-06-08 05:16:34.901813	Details available CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter. Published: 2020-03-16T15:34:23.000Z Updated: 2024-08-04T10:58:39.681Z Open on db.gcve.eu Reference links https://centos-webpanel.com/changelog-cwp7 https://www.exploit-db.com/exploits/48212	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.