| Package | Affected versions | Patched versions |
|---|---|---|
| webpanel | = 0.9.8.837 |
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free