CVE coverage
View on NVD →
CVE-2022-44877
CVSS 9.8
Actively exploited (KEV)
1 detection found
login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | Potential Centos Web Panel Exploitation Attempt - CVE-2022-44877 | test | 2023-01-20 |