CVE-2020-10230

CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter.

• CWE-89

• https://centos-webpanel.com/changelog-cwp7Release Notes, Vendor Advisory
• https://www.exploit-db.com/exploits/48212Exploit, Third Party Advisory, VDB Entry
• https://centos-webpanel.com/changelog-cwp7Release Notes, Vendor Advisory
• https://www.exploit-db.com/exploits/48212Exploit, Third Party Advisory, VDB Entry

Published

Mar 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10224An unauthenticated file upload vulnerability has been identi…9.8
• CVE-2020-10225An unauthenticated file upload vulnerability has been identi…9.8
• CVE-2020-10227A cross-site scripting (XSS) vulnerability in the messages m…6.1
• CVE-2020-10228A file upload vulnerability in vtecrm vtenext 19 CE allows a…8.8
• CVE-2020-10229A CSRF issue in vtecrm vtenext 19 CE allows attackers to car…8.8
• CVE-2020-1023A remote code execution vulnerability exists in Microsoft Sh…8.8
• CVE-2020-10231TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.…7.5
• CVE-2020-10232In version 4.8.0 and earlier of The Sleuth Kit (TSK), there …9.8
• CVE-2020-10233In version 4.8.0 and earlier of The Sleuth Kit (TSK), there …9.1
• CVE-2020-10234The AscRegistryFilter.sys kernel driver in IObit Advanced Sy…6.5
• CVE-2020-10235An issue was discovered in Froxlor before 0.10.14. Remote at…8.8
• CVE-2020-10236An issue was discovered in Froxlor before 0.10.14. It create…6.1