All vulnerabilities

Servers and applications

CVE-2023-42120

Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific flaw exists within the dns_zone_editor module. The issue results from the lack of proper validation of a user-supplied…

Severity
High 8.8
Published
3 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Control Web PanelServers and applications · cpe:a:control-webpanel:webpanel
  • Version 0.9.8.1152

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-42120
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-42120