ctrlpanel-installer: CtrlPanel Installer Exposure

2026-07-09 ctrlpanel-installer PoC Public

Description

CtrlPanel is susceptible to the Installation page exposure due to misconfiguration.

PoC

id: ctrlpanel-installer

info:
  name: CtrlPanel Installer Exposure
  author: theamanrawat
  severity: high
  description: CtrlPanel is susceptible to the Installation page exposure due to misconfiguration.
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.title:"CtrlPanel.gg installer Script"
    fofa-query: body="CtrlPanel | installer"
  tags: misconfig,ctrlpanel,install,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/installer/'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'CtrlPanel | installer'
          - '<title>CtrlPanel.gg installer Script'
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100920ca6fa93237433fffa285aa7dbbcc3bfc1c7cd2de4a9569bd9db585f8bfc9f022100a559e1c525c4220ed8e7380ca7a838063b138443958cf46685073d2f8a2b60a0:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/ctrlpanel-installer.yaml

References

Related Vulnerabilities