← back
CVE-2019-10261

CVE-2019-10261

EPSS 2.4%
CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/152303/CentOS-Web-Panel-0.9.8.789-Cross-Site-Scripting.htmlunverifiedcve_referencewww.exploit-db.com/exploits/46629unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://packetstormsecurity.com/files/152303/CentOS-Web-Panel-0.9.8.789-Cross-Site-Scripting.htmlhttps://www.exploit-db.com/exploits/46629http://www.securityfocus.com/bid/107769