105 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the body parameter to templates/ZPanelV2/template.php or 2 the page parameter to zpanel.php. NOTE: the zpanel.php vector may overlap CVE-2005-0793.2. NOTE: the...
CVE-2007-1123
CVE-2007-1123 refers to multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0. An attacker can execute arbitrary PHP code by supplying a URL via the body parameter of templates/ZPanelV2/template.php or the page parameter of zpanel.php. The zpanel.php vector may overlap CVE-2005-0793. T...
CVE-2007-1123
Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the body parameter to templates/ZPanelV2/template.php or 2 the page parameter to zpanel.php. NOTE: the zpanel.php vector may overlap CVE-2005-0793.2. NOTE: the...
zpanel.txt
ZPanel Remote File Inclusion ZPanel is a hosting control panel used by web hosts to give their users a friendly interface to manage any aspects of their hosting or account information. ZPanel is an open source project and runs on Windows and Linux. zpanel tested on : Windows : 2000 Adv. Server,20...
ZPanel 2.0 Multiple Script Remote File Inclusion
The remote host is running ZPanel, an open source hosting control panel written in PHP. The installation of ZPanel on the remote host fails to sanitize user- supplied input to the 'page' and 'body' parameters of the 'zpanel.php' and 'templates/ZPanelV2/template.php' scripts respectively before...
r57zpanel.pl.txt
!/usr/bin/perl use LWP::UserAgent; ZPanel Ver. 2.5- Public BETA 2 Release date: 1/15/2005 sql injection exploit with one char bruteforce work on all mysql versions -------------------------------------------------------- example: r57zpanel.pl http://192.168.0.1/zpanel/index.php admin PATH :...
ZPanel 2.5b10 - SQL Injection
ZPanel 2.5b10 - SQL Injection !/usr/bin/perl use LWP::UserAgent; ZPanel Ver. 2.5- Public BETA 2 Release date: 1/15/2005 sql injection exploit with one char bruteforce work on all mysql versions -------------------------------------------------------- example: r57zpanel.pl...
ZPanel <= 2.5b10 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; ZPanel Ver. 2.5- Public BETA 2 Release date: 1/15/2005 sql injection exploit with one char bruteforce work on all mysql versions -------------------------------------------------------- example: r57zpanel.pl...
ZPanel <= 2.5b10 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================= ZPanel 0 print "\b\b\b\b\b"."\b"xlength$n." DONE "; print qq USERNAME: $username FTPPASS: $allchar ; else print "\b\b\b\b\b"."\b"xlength$n." FAILED "; exit; else $allchar .= chr$char; $snum++;...
ZPanel 2.5b10 - SQL Injection
!/usr/bin/perl use LWP::UserAgent; ZPanel Ver. 2.5- Public BETA 2 Release date: 1/15/2005 sql injection exploit with one char bruteforce work on all mysql versions -------------------------------------------------------- example: r57zpanel.pl http://192.168.0.1/zpanel/index.php admin PATH :...
zpanelFlaws.txt
Hello, Few bugs have been discovered accidently in zPanel. Developers were notified on 07.March but I have not received any response. Best regards, Mikhail. ------------------------------------------------------------- Product Description "ZPanel is a hosting control interface developed for both...
CVE-2005-0794
ZPanel 2.0 and 2.5 beta 10 are affected by a vulnerability where installation scripts remain accessible after use. This may allow remote attackers to reinstall the software and potentially cause a denial of service via a direct request to install.php. The issue is described in CVE-2005-0794 and i...
CVE-2005-0793
PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to 1 execute arbitrary PHP code in ZPanel 2.0 or 2 include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter...
CVE-2005-0792
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter to index.php or 2 page parameter to zpanel.php...
CVE-2005-0793
Summary: The provided documents describe a PHP remote file inclusion (RFI) vulnerability in ZPanel, affecting zpanel.php and related template code. The issue arises from insufficient sanitization of user-supplied input in the page parameter (and, for templates/ZPanelV2/template.php, the body para...
CVE-2005-0794
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php...
CVE-2005-0792
The provided sources identify CVE-2005-0792 as a SQL injection vulnerability in ZPanel 2.0. The affected components are the web application files index.php (parameter: uname) and zpanel.php (parameter: page), through which an attacker could remotely execute arbitrary SQL commands. The vulnerabili...
Few remote bugs in zPanel
Hello, Few bugs have been discovered accidently in zPanel. Developers were notified on 07.March but I have not received any response. Best regards, Mikhail. ------------------------------------------------------------- Product Description "ZPanel is a hosting control interface developed for both...
CVE-2005-0794
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php...