Security Vulnerabilities fixed in Control Web Panel 0.9.8.1055

Description

The unprivileged user portal part of CentOS Web Panel is affected by SQL Injection and Command Injection vulnerabilities, leading to root Remote Code Execution.

Affected Applications

Control Web Panel

CVE References

CVE-2021-31316 CVE-2021-31324

Other References

https://www.shielder.com/advisories/centos-web-panel-idsession-root-rce/