Approved changes feed: RSS · Atom

cpe:2.3:a:interworx:web_control_panel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInterworx (d95a6497-9c4c-5386-9b28-4cd7e7279375)
ProductWeb Control Panel (7ca4d4df-d3c3-56e6-be1a-88a54d9de344)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2531 vulnerable 2026-06-08 05:05:29.048820 Details available
SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the (1) NodeWorx , (2) SiteWorx, or (3) Resellers interface, as demonstrated by the "or" key in a pgn8state object in an i object in a JSON object.
Published: 2014-10-21T16:00:00.000Z
Updated: 2024-08-06T10:14:26.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2035 vulnerable 2026-06-08 05:05:27.337371 Details available
Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter.
Published: 2014-02-27T15:00:00.000Z
Updated: 2024-08-06T09:58:16.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.