CVE-2018-18322

CRITICO 9.8CVE-2018-18322 · Published 15/10/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
webpanel control-webpanel	`= 0.9.8.480`	No fix yet

Description

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.

References

0day.today/exploit/31304 · Exploit
seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities · Third Party Advisory
exploit-db.com/exploits/45610 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free