CVE-2012-5684

概要

参考情報

• osvdb.org/show/osvdb/87139
• packetstormsecurity.com/files/117894/ZPanel-10.0.1-XSS-CSRF-SQL-Injection.html · Exploit
• secunia.com/advisories/51172
• exploit-db.com/exploits/22490 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/79839

zpanel のその他の脆弱性

• CVE-2012-5686緊急 9.8ZPanel 10.0.1 has insufficient entropy for its password reset process.
• CVE-2012-6654高 7.5Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) res…
• CVE-2012-5685高 7.5SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress pa…
• CVE-2012-5683中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication …