| Package | Affected versions | Patched versions |
|---|---|---|
| webpanel | < 0.9.8.1107 | 0.9.8.1107 |
In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the /resources/ folder.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free