CVE-2018-18773

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by…

mitre·CWE-352·Published 2018-11-20

CVSS

—

EPSS

0.03

KEV

Exploits

cve.orgen

159 chars

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by changing the root password.

NVDen

159 chars

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demonstrated by changing the root password.

NVDes

239 chars

CentOS-WebPanel.com (también conocido como CWP) CentOS Web Panel hasta la versión 0.9.8.740 permite Cross-Site Request Forgery (CSRF) mediante admin/index.php?module=rootpwd, tal y como queda demostrado con el cambio de la contraseña root.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H