Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2019-13476

Disclosure Date: August 21, 2019 (last updated November 27, 2024)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, XSS in the domain parameter allows a low-privilege user to achieve root access via the email list page.
0
0
Attacker Value
Unknown

CVE-2019-13477

Disclosure Date: August 21, 2019 (last updated November 27, 2024)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
0
0