Messages

1

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 07:12:17 PM »

I think any kind of information can be useful to us.

2

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 06:27:09 PM »

I ran into the same issues, but unfortunately, I couldn’t find a solution. The hacker had literally taken over the server. Even though sshd, FTP, Apache, and Nginx were disabled, .ssh folders were being created every time, and code was being injected. Unfortunately, the only solution I found was to switch to a different control panel.

3

CentOS-WebPanel Bugs / Re: I think there is a very serious security vulnerability in CWP right now.

« on: June 18, 2026, 07:39:04 AM »

To delete the .ssh folders under each user's /home directory

for d in /home/*/.ssh; do
    if [ -d "$d" ]; then
        chattr -R -ia "$d" 2>/dev/null
        rm -rf "$d"
        echo "removed: $d"
    fi
done

and this is clean.sh

#!/bin/bash

# home
TARGET_DIR="/home"

# Malware string which we are looking for
MALWARE_STRING='eval(base64_decode("aW5pX3NldCgiZGlzcGxheV9lcnJvcnMiLCAwKTs'

echo "starting..."
echo "scanning: $TARGET_DIR"
echo "wait..."
echo "------------------------------------------------"


find "$TARGET_DIR" -type f -name "*.php" | while read -r file; do

    # check for malware
    if grep -qF "$MALWARE_STRING" "$file"; then
        echo "[!] code is detected: $file"

        # removing
        sed -i "/eval(base64_decode(\"aW5pX3NldCgiZGlzcGxheV9lcnJvcnMiLCAwKTs/d" "$file"

    fi
done

echo "------------------------------------------------"
echo "done."

chmod 755 clean.sh then start. At least it will help you clean up

4

CentOS-WebPanel Bugs / Re: BUG* backup_manager2 not connecting to ftp server

« on: May 18, 2026, 06:35:57 PM »

Hi!

The backups cannot be executed yet.
Did you test in yout servers?

Thanks!

The problem is still ongoing. CWP Support hasn't released any updates!

5

CentOS-WebPanel Bugs / Re: BUG* backup_manager2 not connecting to ftp server

« on: May 17, 2026, 06:08:50 AM »

? Jose just talked about releasing an update possibly this weekend that resolves the new backup issues.

I hope that's true, because I'm currently looking for an alternative panel.

6

CentOS-WebPanel Bugs / Re: BUG* backup_manager2 not connecting to ftp server

« on: May 16, 2026, 08:31:24 AM »

Unfortunately, I haven’t been able to find a solution to the problem; since the CWP codes are encrypted with IonCube, I can’t see how they work. Only CWP Support can help us with this, but as far as I can tell, they aren’t currently working on developing the CWP panel. I’ve been using CWP Pro for many years, and unfortunately, they’re going to lose a lot of users this way!

7

CentOS-WebPanel Bugs / Re: BUG* backup_manager2 not connecting to ftp server

« on: May 14, 2026, 07:17:51 PM »

Also there are errors in console :

Uncaught SyntaxError: JSON.parse: unexpected end of data at line 1 column 1 of the JSON data
    complete https://domain.com:2031/cwp_8fe31ccb5622ad76e7d62f7b7723767b/admin/index.php?module=backup_manager2:2626
    jQuery 6
    editbackup https://domain.com:2031/cwp_8fe31ccb5622ad76e7d62f7b7723767b/admin/index.php?module=backup_manager2:2616
    onclick https://domain.com:2031/cwp_8fe31ccb5622ad76e7d62f7b7723767b/admin/index.php?module=backup_manager2:1

8

CentOS-WebPanel Bugs / BUG* backup_manager2 not connecting to ftp server

« on: May 14, 2026, 06:42:37 PM »

I can't create backups to my ftp server! I tried to connect ssh server with ssh it's working but when i tried to connect from CWP panel it's giving login failed. This happened after updating to the new version of CWP server.

Log Monitor
2026-05-14 11:26:04 TYPE FTP --> 1
2026-05-14 11:26:04 Type conection Back FTP
2026-05-14 11:26:05 Failed to connect to xxxxx.storagebox.de (login failed)
2026-05-14 11:26:05 /
2026-05-14 11:26:08 Backup Finished
tail -f /var/log/cwp/cron_backup.log


* There is a bug in the CWP backup_manager2 module: Instead of saving the value you enter as the FTP password, it automatically generates a placeholder in the format PP + date + time (PP20260514112254). As a result, the FTP server
  returns an “invalid credentials” error.

9

Backup / Re: Automate backup to Google Drive

« on: October 19, 2021, 05:46:56 AM »

Updated link:

https://portal.starbursthosting.com/knowledgebase/9/CWP-Integration-with-Google-Drive-on-CentOS-8.x-using-rclone.html

Forum would not allow me to update above post. 

I can confirm that rclone working very well with gdrive!

10

CentOS 7 Problems / Re: Which files should I remove to decrease the /dev/mapper/centos-root size.

« on: October 19, 2021, 05:40:08 AM »

I have went through the portal and have found ways to increase the size of /dev/mapper/centos-root partition.
But as of now I am not having proper arrangements to make a backup of the entire data and repartition the server.

Can anyone guide me, which files can I remove / delete to get free space in /dev/mapper/centos-root

Also, is there a command to get list of files in the partition.
#ls /dev/mapper/centos-root
shows only one file.

Do help me with a solution.

Check /backup directory...It was the problem with my vps.

11

Information / Re: Empty user list

« on: January 17, 2020, 03:53:11 PM »

administering 20 dedicated servers to all running CWP and all appreciate this same problem.

Unfortunately same for me! I hope they will fix it asap.

12

Updates / Re: CWPpro version: 0.9.8.928

« on: January 17, 2020, 03:28:49 PM »

I have same problem with /design/img/js.php in CWPpro and free versions (0.9.8.928). I can't see user lists and more.