Lucene search

Panel Security Vulnerabilities

cve

CVE-2024-5958

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection.This issue affects Panel: before v2.3.24.

8.8CVSS

7.4AI Score

0.001EPSS

2024-09-18 03:15 PM

cve

CVE-2024-5959

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.This issue affects Panel: before v2.3.24.

5.4CVSS

6.5AI Score

0.0004EPSS

2024-09-18 03:15 PM

cve

CVE-2024-5960

Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24.

9.8CVSS

6.7AI Score

0.001EPSS

2024-09-18 03:15 PM

cve

CVE-2024-6877

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.This issue affects Panel: before v2.3.24.

6.1CVSS

6.7AI Score

0.0005EPSS

2024-09-18 03:15 PM