CVE-2022-44877: CWP Control Web Panel OS Command Injection Vulnerability
login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.
Other sources
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-44877?
CVE-2022-44877 is a vulnerability in CWP Control Web Panel that allows remote attackers to execute commands via shell metacharacters in the login parameter.
How does CVE-2022-44877 affect CWP Control Web Panel?
CVE-2022-44877 allows remote attackers to execute commands on CWP Control Web Panel.
What is the severity of CVE-2022-44877?
The severity of CVE-2022-44877 is high.
How do I fix CVE-2022-44877?
To fix CVE-2022-44877, update CWP Control Web Panel to the latest version provided by the vendor.
Where can I find more information about CVE-2022-44877?
More information about CVE-2022-44877 can be found at the following link: [https://control-webpanel.com/changelog#1669855527714-450fb335-6194](https://control-webpanel.com/changelog#1669855527714-450fb335-6194)