Control WebPanel Webpanel 0.9.8.891
Approved changes feed: RSS · Atom
cpe:2.3:a:control-webpanel:webpanel:0.9.8.891:*:*:*:*:*:*:*part: a version: 0.9.8.891 update: *
| Vendor | Control Webpanel (3d61e022-bd40-5c1f-9d78-0c52e5ce5272) |
|---|---|
| Product | Webpanel (2e729440-b973-55b7-97c0-8a313d6c8d51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15420 |
vulnerable | 2026-06-08 05:19:25.902702 |
Details available
CRITICAL (9.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9259.
Published: 2020-07-28T17:01:06.000Z
Updated: 2024-08-04T13:15:20.788Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.