Lucene search
PRIOn knowledge basePRION:CVE-2022-44877HistoryJan 05, 2023 - 11:15 p.m.
Design/Logic Flaw
2023-01-0523:15:00
PRIOn knowledge base
www.prio-n.com
11
cwp
centos web panel
remote attackers
os commands
login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webpanel | lt | 0.9.8.1147 |
References
packetstormsecurity.com/files/170388/Control-Web-Panel-7-Remote-Code-Execution.html
packetstormsecurity.com/files/170820/Control-Web-Panel-Unauthenticated-Remote-Command-Execution.html
packetstormsecurity.com/files/171725/Control-Web-Panel-7-CWP7-0.9.8.1147-Remote-Code-Execution.html
seclists.org/fulldisclosure/2023/Jan/1
gist.github.com/numanturle/c1e82c47f4cba24cff214e904c227386
www.youtube.com/watch?v=kiLfSvc1SYY
Related
packetstorm
packetstorm
Control Web Panel Unauthenticated Remote Command Execution
2023-01-31 00:00:00
Control Web Panel 7 Remote Code Execution
2023-01-09 00:00:00
Control Web Panel 7 (CWP7) 0.9.8.1147 Remote Code Execution
2023-04-06 00:00:00
cisa_kev
cisa_kev
CWP Control Web Panel OS Command Injection Vulnerability
2023-01-17 00:00:00
nessus
nessus
zdt
zdt
Control Web Panel Unauthenticated Remote Command Execution Exploit
2023-01-31 00:00:00
Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution Vulnerability
2023-04-02 00:00:00
Control Web Panel 7 Remote Code Execution Vulnerability
2023-01-10 00:00:00
attackerkb
attackerkb
CVE-2022-44877
2023-01-05 00:00:00
metasploit
metasploit
CWP login.php Unauthenticated RCE
2023-01-20 14:04:24
githubexploit
githubexploit
Exploit for OS Command Injection in Control-Webpanel Webpanel
2023-02-15 15:22:48
Exploit for OS Command Injection in Control-Webpanel Webpanel
2023-01-06 16:53:51
Exploit for OS Command Injection in Control-Webpanel Webpanel
2023-02-11 20:45:08
cve
cve
CVE-2022-44877
2023-01-05 23:15:09
wizblog
wizblog
nuclei
nuclei
CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution
2023-01-07 07:01:12
thn
thn
cvelist
cvelist
CVE-2022-44877
2023-01-05 00:00:00
nvd
nvd
CVE-2022-44877
2023-01-05 23:15:09
exploitdb
exploitdb
Centos Web Panel 7 v0.9.8.1147 - Unauthenticated Remote Code Execution (RCE)
2023-04-01 00:00:00
Control Web Panel 7 (CWP7) v0.9.8.1147 - Remote Code Execution (RCE)
2023-04-05 00:00:00
rapid7blog
rapid7blog
Exploitation of Control Web Panel CVE-2022-44877
2023-01-19 19:04:48
Metasploit Weekly Wrap-Up
2023-02-03 19:21:26
What’s New in InsightVM and Nexpose: Q1 2023 in Review
2023-03-31 15:44:29
trellix
trellix
The Bug Report January 2023 Edition
2023-02-01 00:00:00
The Bug Report January 2023 Edition
2023-02-01 00:00:00