writeups.xyz / We discovered major vulnerabilities in Control Web Panel. Here’s how we found them.

Submitter : c2a

Date: 15 August 2022

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• RCE
• Weak Crypto
• Password Reset
• Account Takeover

Programs :

• Centos Web Panel (CWP)

Authors :

• Immersive Labs (@Immersivelabs)

Link :
https://www.immersivelabs.com/blog/we-discovered-major-vulnerabilities-in-control-web-panel-heres-how-we-found-them/