PT-2005-1821 · Zpanel · Zpanel

Mik- + 1 · Publicado 2005-03-15 · Atualizado 2017-07-11 · CVE-2005-0792

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZPanel version 2.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the uname parameter to "index.php" or the page parameter to "zpanel.php".

Recommendations For ZPanel version 2.0, consider restricting access to the uname parameter in "index.php" and the page parameter in "zpanel.php" to minimize the risk of exploitation. Avoid using these parameters until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-0792

Produtos afetados

Zpanel

Referências · 7

• 🔥 https://exploit-db.com/exploits/881 · Exploit
• http://marc.info/?l=bugtraq&m=111142323616309&w=2 · Nota
• http://marc.info/?l=bugtraq&m=111090324111053&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19709 · Nota
• http://securityfocus.com/bid/12809 · Aviso do Fabricante
• http://secunia.com/advisories/14602 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0792 · Nota de Segurança