Back to directory
WRITEUP #2348

We discovered major vulnerabilities in Control Web Panel. Here’s how we found them.

RCEPath traversalWeak cryptoPassword resetAccount takeover
by@immersivelabs(Immersive Labs)
Program
Centos Web Panel (CWP)
Published
Aug 15, 2022
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://www.immersivelabs.com/blog/we-discovered-major-vulnerabilities-in-control-web-panel-heres-how-we-found-them/
▸ RELATED WRITEUPS
Unlocking the Weak Spot: Exploiting Insecure Password Reset Tokens
RCEBruteforce
Traccar 5 Remote Code Execution Vulnerabilities
RCEUnrestricted file upload
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE
Path Traversal and Code Execution in CSLA.NET (CVE-2024-28698)
RCEPath traversal
Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough
AI / LLMAI

Built with ❤️ by Shubham Rawat