Threats tagged 'ghsa-6q25-xprm-2cg4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.3	CVE-2025-67888Control Web Panel (CWP) · OS Command Injection High7.32026-05-08GCVE DatabaseCVE-2025-67888 Control Web Panel (CWP) versions prior to 0.9.8.1209 contain a command injection vulnerability via the 'key' GET parameter in /admin/index.php when the 'api' parameter is set. This flaw allows unauthenticated attackers to execute arbitrary OS commands as root if Softaculous or SitePad is installed. Report on CVE-2025-67888 Vulnerability CWE-78 #ghsa-6q25-xprm-2cg4	GCVE Database	2026-05-08

Page 1 of 1