POC-CVE-2026-58048

CVE-2026-58048 CVSS 4.0: 9.4 치명적 | CWE-89: SQL 인젝션 | NVD 인증된 cPanel 사용자 → 데이터베이스 이름 변경을 통한 MySQL root 권한의 임의의 SQL 실행. cPanel은 이름 변경 작업을 root로 실행할 때 사용자 세션의 sqlmodeANSIQUOTES를 부적절하게 유지합니다 — 데이터베이스 이름의 백틱이 식별자에서 벗어나 SQL을 주입합니다. name: db; GRANT ALL ON . TO 'rce'@'%' IDENTIFIED BY 'pwned!'; -- 빠른 시작...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – cPanel 루트 SQL 실행 툴킷 ⚠️ 윤리적 사용만 허용 – 승인된 보안 테스트 이 저장소는 승인된 보안 전문가, 블루팀, 침투 테스터 만을 위한 도구를 제공합니다. 컴퓨터 시스템에 대한 무단 접근은 CFAA미국, Computer Misuse Act영국, TCK 243/244터키 및 전 세계의 유사 법률 에 따라 불법입니다. 📖 취약점 개요 CVE‑2026‑58048 은 cPanel & WHM 11.x 버전의 치명적인 SQL 인젝션 취약점으로, 인증된 cPanel 사용자가 데이터베이스 이름...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58048

CVE-2026-58048 affects cPanel: during database rename operations the SQL mode is not properly preserved, allowing execution of SQL in the root context. The underlying issue is described as improper preservation of SQL mode when renaming databases, which can enable privilege escalation on privileg...

EUVD-2026-51573

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

PT-2026-66785

Name of the Vulnerable Software and Affected Versions cPanel affected versions not specified Description Improper preservation of SQL mode when renaming databases allows the execution of SQL commands in root context. Recommendations At the moment, there is no information about a newer version tha...

CVE-2026-58048: Improper Neutralization of Special Elements used in an SQL Command

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2011-4634

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted database name, related to the Database Synchronize panel; 2 a crafted database name, related to the Database rename panel; 3 a crafted S...

DEBIAN-CVE-2011-4634

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted database name, related to the Database Synchronize panel; 2 a crafted database name, related to the Database rename panel; 3 a crafted S...

CVE-2011-4634: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted database name, related to the Database Synchronize panel; 2 a crafted database name, related to the Database rename panel; 3 a crafted S...

phpMyAdmin -- Multiple XSS

The phpMyAdmin development team reports: Using crafted database names, it was possible to produce XSS in the Database Synchronize and Database rename panels. Using an invalid and crafted SQL query, it was possible to produce XSS when editing a query on a table overview panel or when using the vie...