PT-2005-1821 · Zpanel · Zpanel

Mik- + 1 · Published 2005-03-15 · Updated 2017-07-11 · CVE-2005-0792

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZPanel version 2.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the uname parameter to "index.php" or the page parameter to "zpanel.php".

Recommendations For ZPanel version 2.0, consider restricting access to the uname parameter in "index.php" and the page parameter in "zpanel.php" to minimize the risk of exploitation. Avoid using these parameters until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-0792

Affected Products

Zpanel

References · 7

• 🔥 https://exploit-db.com/exploits/881 · Exploit
• http://securityfocus.com/bid/12809 · Vendor Advisory
• http://secunia.com/advisories/14602 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0792 · Security Note
• http://marc.info/?l=bugtraq&m=111142323616309&w=2 · Note
• http://marc.info/?l=bugtraq&m=111090324111053&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19709 · Note