Description
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response.
Exploits (1)
exploitdb
WRITEUP
by Pongtorn Angsuchotmetee_ Nissana Sirijirakal_ Narin Boonwasanarak · textwebappslinux
https://www.exploit-db.com/exploits/47125
References (3)
Scores
CVSS v3
5.3
EPSS
0.2044
EPSS Percentile
95.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-203
Status
published
Products (1)
control-webpanel/webpanel
0.9.8.836
Published
Jul 16, 2019
Tracked Since
Feb 18, 2026