{"uuid": "d6062973-f115-48fb-a34e-20bfa177ce67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44877", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/control_web_panel_login_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Spencer McIntyre\", \"Numan T\\u00fcrle\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Control Web Panel versions < 0.9.8.1147 are vulnerable to\\n          unauthenticated OS command injection. Successful exploitation results\\n          in code execution as the root user. The results of the command are not\\n          contained within the HTTP response and the request will block while\\n          the command is running.\", \"disclosure_date\": \"2023-01-05\", \"fullname\": \"exploit/linux/http/control_web_panel_login_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"CWP login.php Unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/control_web_panel_login_cmd_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/control_web_panel_login_cmd_exec\", \"references\": [\"CVE-2022-44877\", \"URL-https://github.com/numanturle/CVE-2022-44877\", \"URL-https://control-webpanel.com/changelog#1674073133745-84af1b53-c121\"], \"rport\": 2031, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:28.467413Z"}