EDB-48212

PoC

Centos WebPanel 7 - 'term' SQL Injection

view exploit source exploit_dbtype webappsauthor Berke YILMAZpublished 2020-03-13catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-10230US	critical9.8	15.8% (97th)	Exploit	2020-03-16
CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.