In bPanel 2.0, the administrative ajax endpoints aka ajax/aj.php are accessible without authentication and allow SQL injections, which could lead to platform compromise...
9.8CVSS0.01668EPSS
SaveExploits0References1
Prion•added 2021/03/02 7:15 p.m.•26 views
Sql injection
In bPanel 2.0, the administrative ajax endpoints aka ajax/aj.php are accessible without authentication and allow SQL injections, which could lead to platform compromise...
