1Panel SQL injection in github.com/1Panel-dev/1Panel

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-39911 · ADVISORY
• blog.mo60.cn/index.php/archives/1Panel_SQLinjection2Rce.html · WEB
• 1Panel-dev/1Panel security advisory · WEB

github.com/1Panel-dev/1Panel의 다른 취약점

• CVE-2025-34430보통 4.31Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.…
• CVE-2025-34429높음 7.11Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The …
• CVE-2025-34410높음 7.11Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available fr…
• CVE-2025-66508보통 6.51Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration whi…
• CVE-2025-66507높음 7.51Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker t…