ZPanel records
4 published records for vendor ZPanel.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
31Monitor | CVE-2007-1123No exploit | Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the bzpanel · zpanel | High7.5 | 1.7%Feb 26, 2007 |
30Monitor | CVE-2005-0793No exploit | PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (zpanel · zpanel | High7.5 | 1.4%Mar 15, 2005 |
30Monitor | CVE-2005-0792Proof of concept | SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.phpzpanel · zpanel | High7.5 | 1.1%Mar 15, 2005 |
25Monitor | CVE-2005-0794No exploit | ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinszpanel · zpanel | Medium6.4 | 1.5%Mar 15, 2005 |
- CVE-2007-112331Monitor
Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the b
HighCVSS 7.5No exploitEPSS 1%zpanel · zpanelFeb 26, 2007
- CVE-2005-079330Monitor
PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (
HighCVSS 7.5No exploitEPSS 1%zpanel · zpanelMar 15, 2005
- CVE-2005-079230Monitor
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php
HighCVSS 7.5Proof of conceptEPSS 1%zpanel · zpanelMar 15, 2005
- CVE-2005-079425Monitor
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reins
MediumCVSS 6.4No exploitEPSS 1%zpanel · zpanelMar 15, 2005