1Panel SQL injection in github.com/1Panel-dev/1Panel

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-39911 · ADVISORY
• blog.mo60.cn/index.php/archives/1Panel_SQLinjection2Rce.html · WEB
• 1Panel-dev/1Panel security advisory · WEB

github.com/1Panel-dev/1Panel 的其他漏洞

• CVE-2025-34430中危 4.31Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.…
• CVE-2025-34429高危 7.11Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The …
• CVE-2025-34410高危 7.11Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available fr…
• CVE-2025-66508中危 6.51Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration whi…
• CVE-2025-66507高危 7.51Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow an unauthenticated attacker t…