UpHeron
All vulnerabilities

Servers and applications

CVE-2023-42123

Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific flaw exists within the mysql_manager module. The issue results from the lack of proper validation of a user-supplied string…

Severity
High 8.8
Published
3 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Control Web PanelServers and applications · cpe:a:control-webpanel:webpanel
  • Version 0.9.8.1152

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-42123
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-42123