EDB-22490
functionalZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
view exploit source exploit_dbverifiedtype webappsauthor pcsjjpublished 2012-11-05catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-5686US | critical9.8OT high | Exploit | ||
ZPanel 10.0.1 has insufficient entropy for its password reset process. | ||||
| CVE-2012-5685US | high7.5 | Exploit | ||
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the… | ||||
| CVE-2012-5684US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccoun… | ||||
| CVE-2012-5683US | medium6.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1)… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan