CVE-2022-44877

NVD Published Date: January 05, 2023 at 11:15 PM
NVD Last Modified: June 28, 2024 at 01:45 PM
Download Patch
Vulnerability ID
CVE-2022-44877
Severity
CRITICAL
Severity Score
9.8
Summary
login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.
Mitigation and Patches
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE ID
CWE-78

Recent Publish

CVE-2022-47966

CVE-2023-25717

CVE-2022-47986

CVE-2023-23397

CVE-2024-7903

CVE-2024-7904

See SecOps Solution
in action

Schedule Demo