# Control-Webpanel Webpanel


- [CVE-2022-44877](https://insights.sbomify.com/CVE-2022-44877/): CWP Control Web Panel OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2025-48703](https://insights.sbomify.com/CVE-2025-48703/): CWP Control Web Panel OS Command Injection (critical 9.0, exploited in the wild)
- [CVE-2023-42121](https://insights.sbomify.com/CVE-2023-42121/): Control Web Panel Missing Authentication Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-45466](https://insights.sbomify.com/CVE-2021-45466/): Missing authorization in n/a (critical 9.8)
- [CVE-2021-45467](https://insights.sbomify.com/CVE-2021-45467/): Missing authorization in n/a (critical 9.8)
- [CVE-2022-25046](https://insights.sbomify.com/CVE-2022-25046/): Path traversal in n/a (critical 9.8)
- [CVE-2021-31316](https://insights.sbomify.com/CVE-2021-31316/): SQL injection in n/a (critical 9.8)
- [CVE-2021-31324](https://insights.sbomify.com/CVE-2021-31324/): Command injection in n/a (critical 9.8)
- [CVE-2020-15420](https://insights.sbomify.com/CVE-2020-15420/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15421](https://insights.sbomify.com/CVE-2020-15421/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15422](https://insights.sbomify.com/CVE-2020-15422/): Command injection in CentOS Web Panel (critical 9.8)
- [CVE-2020-15423](https://insights.sbomify.com/CVE-2020-15423/): Command injection in CentOS Web Panel (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/control-webpanel/webpanel/