CVE-2022-44877 in Panel 7

Riassunto

di MITRE • 06/01/2023

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 07/11/2022
• Divulgazione: 06/01/2023
• Moderazione: accettato
• Voce: VDB-217540
• CPE: pronto
• CWE: CWE-78 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.99995
• KEV: si
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-44877
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-44877
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-44877/