EDB-22490
webappsmultipleVERIFIED
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5686CVE-2012-5685CVE-2012-5684+1 more
pcsjj11/5/2012
CVE-2012-5685
NONESQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients modu
Veröffentlicht: 8/14/2014Aktualisiert: 4/12/2025
Beschreibung
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.
KI-AnalyseKI-gestützt
Betroffene Produkte
zpanelcpzpanel