PT-2005-1822 · Zpanel · Zpanel

Mik- + 1 · Published 2005-03-15 · Updated 2016-10-18 · CVE-2005-0793

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ZPanel versions 2.0 ZPanel versions 2.5 beta 10 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code in ZPanel 2.0 or include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter.

Recommendations For ZPanel version 2.0, update to a version that fixes the remote file inclusion issue. For ZPanel versions 2.5 beta 10 and earlier, update to a version that fixes the local file inclusion issue. As a temporary workaround, consider restricting access to the page parameter to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0793

Affected Products

Zpanel

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-0793 · Security Note
• http://securityfocus.com/bid/12809 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=111142323616309&w=2 · Note
• http://marc.info/?l=bugtraq&m=111090324111053&w=2 · Note