PT-2005-1822 · Zpanel · Zpanel

Mik- + 1 · Publicado 2005-03-15 · Atualizado 2016-10-18 · CVE-2005-0793

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZPanel versions 2.0 ZPanel versions 2.5 beta 10 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code in ZPanel 2.0 or include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter.

Recommendations For ZPanel version 2.0, update to a version that fixes the remote file inclusion issue. For ZPanel versions 2.5 beta 10 and earlier, update to a version that fixes the local file inclusion issue. As a temporary workaround, consider restricting access to the page parameter to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0793

Produtos afetados

Zpanel

Referências · 4

• http://marc.info/?l=bugtraq&m=111142323616309&w=2 · Nota
• http://marc.info/?l=bugtraq&m=111090324111053&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0793 · Nota de Segurança
• http://securityfocus.com/bid/12809 · Aviso do Fabricante