CVE-2022-44877 in Panel 7

Sumário

de MITRE • 06/01/2023

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 07/11/2022
• Divulgação: 06/01/2023
• Moderação: aceite
• Entrada: VDB-217540
• CPE: pronto
• CWE: CWE-78 (confirmado)
• Exploração: Descarregar
• CVSS: 9.8 (NVD)
• EPSS: 0.99995
• KEV: sim
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-44877
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-44877
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-44877/