跳转到帖子

CWP login.php Unauthenticated RCE

recommended_posts

发布于
  • Members

CWP login.php Unauthenticated RCE

Disclosed
01/05/2023
Created
01/31/2023

Description

Control Web Panel versions < 0.9.8.1147 are vulnerable to unauthenticated OS command injection. Successful exploitation results in code execution as the root user. The results of the command are not contained within the HTTP response and the request will block while the command is running.

Author(s)

  • Spencer McIntyre
  • Numan Türle

Platform

Linux,Unix

Architectures

cmd, x86, x64

Development

  • Source Code
  • History
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…