CWP version 0.9.8.885 suffers from a persistent cross site scripting vulnerability.
34665ba46764bcee8216ca2b204b6d30# Exploit Title: CWP (CentOS Control Web Panel) Store Cross Site Scripting
# Date: 25 Oct 2019
# Exploit Author: Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak
# Vendor Homepage: https://control-webpanel.com/
# Version: 0.9.8.885
# CVE : CVE-2019-16295
+++++++++++++++++++++++++++++++++
# Description:
+++++++++++++++++++++++++++++++++
User can add XSS payload in Directory Name , Filename , file extension in function "File Manager"
+++++++++++++++++++++++++++++++++
# Steps to Reproduce
+++++++++++++++++++++++++++++++++
1. In user panel go to File Management --> File Manager
2. Go to "Create Directory" or "Create File" and insert XSS payload "<img src=x onerror=javascript:alert(document.cookie)>"
3. XSS will trigger.
+++++++++++++++++++++++++++++++++
# PoC
+++++++++++++++++++++++++++++++++
https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-16295.md
+++++++++++++++++++++++++++++++++
# Timeline
+++++++++++++++++++++++++++++++++
2019-07-19: Discovered the bug
2019-07-19: Reported to vendor
2019-07-23: Vender accepted the vulnerability
2019-10-23: The vulnerability has been fixed
2019-10-25: Advisory published
+++++++++++++++++++++++++++++++++
# Discovered by
+++++++++++++++++++++++++++++++++
Pongtorn Angsuchotmetee
Nissana Sirijirakal
Narin Boonwasanarak