Published: 05/01/2023 Updated: 06/04/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 prior to 0.9.8.1147 allows remote malicious users to execute arbitrary OS commands via shell metacharacters in the login parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
control-webpanel webpanel

Check Point Reference: CPAI-2022-1130 Date Published: 18 Jan 2023 Severity: Critical ...

Control Web Panel 7 versions prior to 0981147 suffer from an unauthenticated remote code execution vulnerability ...

Control Web Panel versions prior to 0981147 are vulnerable to unauthenticated OS command injection Successful exploitation results in code execution as the root user The results of the command are not contained within the HTTP response and the request will block while the command is running ...

CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution

Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 Vulnerability description RESERVED An issue in the /login/indexphp component of Centos Web Panel 7 before v0981147 allows unauthenticated attackers to execute arbitrary system commands via crafted HTTP requests Version affected Centos Web Panel 7 - < 0981147 Vulnerability demonstration [+] C

Control Web Panel 7 (CWP7) Remote Code Execution (RCE) (CVE-2022-44877) (Unauthenticated)

CVE-2022-44877-CWP7 Control Web Panel 7 (CWP7) Remote Code Execution (RCE) (CVE-2022-44877) (Unauthenticated) Repository will get updated with POC soon

Bash Script for Checking Command Injection Vulnerability on CentOS Web Panel [CWP] (CVE-2022-44877)

CVE-2022-44877 Overview This bash script is used to test the vulnerability of web servers to CVE-2022-44877 The script performs a curl request to a target URL with a payload encoded in base64 If the target is vulnerable to the CVE-2022-44877 vulnerability, the elapsed time of the curl request will be greater than 35 seconds Installation sudo apt-get update sudo apt-get inst

use go-exploit module #when module mode off go get githubcom/vulncheck-oss/go-exploit #when moduile mode on go mod init examplecom/myapp go get githubcom/vulncheck-oss/go-exploit build go build -o cve-2022-44877 maingo

Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 [+] Centos Web Panel 7 Unauthenticated Remote Code Execution [+] Centos Web Panel 7 - < 0981147 [+] Affected Component ip:2031/login/indexphp?login=$(whoami) [+] Discoverer: Numan Türle @ Gais Cyber Security [+] Vendor: centos-webpanelcom/ - control-webpanelcom/changelog#

CWE-78 https://gist.github.com/numanturle/c1e82c47f4cba24cff214e904c227386 https://www.youtube.com/watch?v=kiLfSvc1SYY http://seclists.org/fulldisclosure/2023/Jan/1 http://packetstormsecurity.com/files/170388/Control-Web-Panel-7-Remote-Code-Execution.html http://packetstormsecurity.com/files/170820/Control-Web-Panel-Unauthenticated-Remote-Command-Execution.html http://packetstormsecurity.com/files/171725/Control-Web-Panel-7-CWP7-0.9.8.1147-Remote-Code-Execution.html https://nvd.nist.gov https://packetstormsecurity.com/files/170388/Control-Web-Panel-7-Remote-Code-Execution.html https://github.com/komomon/CVE-2022-44877-RCE https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2022-1130.html

CVE-2022-44877

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect