Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CentOS Web Panel 代码问题漏洞
Vulnerability Description
CentOS Web Panel（CWP）是一款免费的虚拟主机控制面板。 CWP 0.9.8.836版本中存在安全漏洞。攻击者可借助cwpsrv-xxx cookie利用该漏洞向/tmp目录上传特制的会话文件，进而获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A