EDB-45610

PoC

Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor seccopspublished 2018-10-15catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-18324US	medium6.1	3.21% (88th)	Exploit	2018-10-15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/index.php module, service_start, service_full…
CVE-2018-18323US	high7.5	70.7% (99th)	Exploit	2018-10-15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
CVE-2018-18322US	critical9.8	15.1% (97th)	Exploit	2018-10-15
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, o…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.