EDB-22490
webappsmultipleVERIFIED
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5686CVE-2012-5685CVE-2012-5684+1 more
pcsjj11/5/2012
CVE-2012-5685
NONESQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients modu
Published: 8/14/2014Updated: 4/12/2025
Description
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.
AI AnalysisPowered by AI
Affected Products
zpanelcpzpanel