CVE-2019-11429

MEDIUM

CentOS-WebPanel.com <0.9.8.793,0.9.8.753,0.9.8.807 - XSS

Title source: llm
STIX 2.1

Description

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 (Pro) and 0.9.8.807 (Pro) is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions > "Add DNS Zone" screen.

Exploits (1)

exploitdb WRITEUP
by DKM · textwebappslinux
https://www.exploit-db.com/exploits/46784

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://CentOS-WebPanel.com
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/46784/

Scores

CVSS v3 4.8
EPSS 0.0034
EPSS Percentile 56.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (3)
control-webpanel/webpanel 0.9.8.753
control-webpanel/webpanel 0.9.8.793
control-webpanel/webpanel 0.9.8.807
Published May 13, 2019
Tracked Since Feb 18, 2026