CVE-2018-18774

Published: Nov 20, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-10490 Aliases: GSD-2018-18774

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,1

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: required

Scope: changed

Confidentiality: low

Integrity: low

Availability: none

MEDIUM 4,3

Source: [email protected]

Access Vector: network

Access Complexity: medium

Authentication: none

Confidentiality: none

Integrity: partial

Availability: none

Description

AI Translation Available

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0379

Percentile

0,9th

Updated

EPSS Score Trend (Last 90 Days)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stable

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Access Control Confidentiality Integrity Availability

Potential Impacts:

Bypass Protection Mechanism Read Application Data Execute Unauthorized Code Or Commands

Applicable Platforms

Technologies: AI/ML, Web Based, Web Server

Likelihood of Exploit: High

View CWE Details

Exploit

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery …

Cross-Site Request Forgery (CSRF)

CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery / Cross-Site Scripting

Author: InfinitumIT Published:

View Exploit Code →

Application

Webpanel by Control-Webpanel

Product Information

Vendor Control-Webpanel

Product Webpanel

Version Range Affected

To 0.9.8.740 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:control-webpanel:webpanel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

http://packetstormsecurity.com/files/150169/CentOS-Web-Pane…