CVE-2005-0792 SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php.
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zpanel | = 2.0 | No fix listed |
| zpanel | = 2.5_beta | No fix listed |
| zpanel | = 2.5_beta9 | No fix listed |
| zpanel | = 2.5_beta10 | No fix listed |
References
- 20050315 Few remote bugs in zPanel mailing-list
- 20050320 Re: Few remote bugs in zPanel mailing-list
- 14602 patch third-party-advisory vendor-advisory
- 12809 vdb-entry vendor-advisory
- zpanel-index-sql-injection(19709) vdb-entry