Jan 17, 2023
1 new incident, 0 with updates.
Started
- ClosedCriticalPatched
CWP Control Web Panel: OS Command Injection (CVE-2022-44877)
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter. Added to CISA KEV on 2023-01-17.
CWP Control Web PanelClosed Jan 17, 2023