PatchTheCVEweb control panel vulnerabilities and fixes
Recent CVEs affecting web control panel, with upgrade or downgrade steps. 2 tracked.
Also searched as: webcontrolpanel.
web control panel has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-10-21. Highest priority: CVE-2014-2531 (score 44/100).
- CVE-2014-2531 MEDIUM 6.5 UPGRADE SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and
- CVE-2014-2035 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Cont
FAQ
How do I fix web control panel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web control panel being exploited right now?
None of the tracked web control panel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web control panel CVE should I patch first?
CVE-2014-2531 currently ranks highest (44/100): SQL injection vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and.