Approved changes feed: RSS · Atom

cpe:2.3:a:control-webpanel:webpanel:0.9.8.836:*:*:*:*:*:*:*

part: a version: 0.9.8.836 update: *

VendorControl Webpanel (3d61e022-bd40-5c1f-9d78-0c52e5ce5272)
ProductWebpanel (2e729440-b973-55b7-97c0-8a313d6c8d51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13605 vulnerable 2026-06-08 05:12:52.189932 Details available
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from CVE-2019-13360.
Published: 2019-07-16T16:46:07.000Z
Updated: 2024-08-04T23:57:39.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13383 vulnerable 2026-06-08 05:12:42.187199 Details available
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response.
Published: 2019-07-16T16:54:34.000Z
Updated: 2024-08-04T23:49:24.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13360 vulnerable 2026-06-08 05:12:42.167199 Details available
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
Published: 2019-07-16T17:00:14.000Z
Updated: 2024-08-04T23:49:25.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13359 vulnerable 2026-06-08 05:12:42.166783 Details available
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
Published: 2019-07-16T17:02:22.000Z
Updated: 2024-08-04T23:49:24.753Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.