Control WebPanel Webpanel 0.9.8.923
Approved changes feed: RSS · Atom
cpe:2.3:a:control-webpanel:webpanel:0.9.8.923:*:*:*:*:*:*:*part: a version: 0.9.8.923 update: *
| Vendor | Control Webpanel (3d61e022-bd40-5c1f-9d78-0c52e5ce5272) |
|---|---|
| Product | Webpanel (2e729440-b973-55b7-97c0-8a313d6c8d51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15628 |
vulnerable | 2026-06-08 05:19:26.247840 |
Details available
HIGH (7.5)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the user parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9710.
Published: 2020-07-28T17:01:23.000Z
Updated: 2024-08-04T13:22:29.996Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15627 |
vulnerable | 2026-06-08 05:19:26.247510 |
Details available
HIGH (7.5)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the account parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9738.
Published: 2020-07-28T17:01:23.000Z
Updated: 2024-08-04T13:22:30.494Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15626 |
vulnerable | 2026-06-08 05:19:26.247047 |
Details available
HIGH (7.5)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the term parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9730.
Published: 2020-07-28T17:01:22.000Z
Updated: 2024-08-04T13:22:30.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15625 |
vulnerable | 2026-06-08 05:19:26.246603 |
Details available
HIGH (7.5)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_add_mailbox.php. When parsing the username parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9729.
Published: 2020-07-28T17:01:22.000Z
Updated: 2024-08-04T13:22:30.481Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15624 |
vulnerable | 2026-06-08 05:19:26.246271 |
Details available
HIGH (7.5)
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the domain parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9727.
Published: 2020-07-28T17:01:21.000Z
Updated: 2024-08-04T13:22:30.226Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15623 |
vulnerable | 2026-06-08 05:19:26.245775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15622 |
vulnerable | 2026-06-08 05:19:26.245256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15621 |
vulnerable | 2026-06-08 05:19:26.244843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15620 |
vulnerable | 2026-06-08 05:19:26.244336 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15619 |
vulnerable | 2026-06-08 05:19:26.244014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15618 |
vulnerable | 2026-06-08 05:19:26.243585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15617 |
vulnerable | 2026-06-08 05:19:26.243182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15616 |
vulnerable | 2026-06-08 05:19:26.242872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15615 |
vulnerable | 2026-06-08 05:19:26.242552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15614 |
vulnerable | 2026-06-08 05:19:26.242125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15613 |
vulnerable | 2026-06-08 05:19:26.241800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15612 |
vulnerable | 2026-06-08 05:19:26.241381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15611 |
vulnerable | 2026-06-08 05:19:26.240917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15610 |
vulnerable | 2026-06-08 05:19:26.240446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15608 |
vulnerable | 2026-06-08 05:19:26.237530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15607 |
vulnerable | 2026-06-08 05:19:26.237026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15606 |
vulnerable | 2026-06-08 05:19:26.236678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15435 |
vulnerable | 2026-06-08 05:19:25.909376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15434 |
vulnerable | 2026-06-08 05:19:25.908934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15433 |
vulnerable | 2026-06-08 05:19:25.908634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15432 |
vulnerable | 2026-06-08 05:19:25.908325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15431 |
vulnerable | 2026-06-08 05:19:25.907997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15430 |
vulnerable | 2026-06-08 05:19:25.907598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15429 |
vulnerable | 2026-06-08 05:19:25.907055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15428 |
vulnerable | 2026-06-08 05:19:25.906634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15427 |
vulnerable | 2026-06-08 05:19:25.906300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15426 |
vulnerable | 2026-06-08 05:19:25.905874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15425 |
vulnerable | 2026-06-08 05:19:25.905570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15424 |
vulnerable | 2026-06-08 05:19:25.905256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15423 |
vulnerable | 2026-06-08 05:19:25.904930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15422 |
vulnerable | 2026-06-08 05:19:25.904594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15421 |
vulnerable | 2026-06-08 05:19:25.904169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.