CVE-2018-18323

EPSS 70.7%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 70.7%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

15 Oct 2018Public PoC

15 Oct 2018Published on NVD

Weaponization speed

same dayto first PoC

Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.

Recommendation: Plan a near-term fix — a public PoC already exists.

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/45610/unverified exploitdbwww.exploit-db.com/exploits/45610unverified cve_reference0day.today/exploit/31304unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://0day.today/exploit/31304 https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/https://www.exploit-db.com/exploits/45610/