CVE-2025-12914

A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the component Backend. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-45570

Name of the Vulnerable Software and Affected Versions aaPanel BaoTa versions prior to 11.1.1 Description A SQL injection issue exists in aaPanel BaoTa. The issue is located in the Backend component, specifically within the /database?action=GetDatabaseAccess endpoint. Manipulation of the Name...