Threats tagged 'ghsa-rfph-hxj5-v269'

Control Web Panel (CWP) versions prior to 1.16 contain critical vulnerabilities in the phpini_editor user panel module that allow arbitrary file write and OS command injection. These flaws enable an attacker with access to the module to write files to arbitrary paths and execute operating system commands without restrictions, leading to remote code execution.