TI-2012-04783 CVE-2012-5686 · GHSA-mx36-j5gv-jj56
ZPanel 10.0.1 has insufficient entropy for its password reset process.
Priority MEDIUM 50
ZPanel 10.0.1 has insufficient entropy for its password reset process.
Zpanelcp
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Zpanelcp records in CISA KEVNo Zpanelcp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Zpanel · all components
TI-2012-05371 CVE-2012-6654 · GHSA-f8pp-2xf6-68jq
Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote…
Priority LOW 37
Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) resetkey or (2) inConfEmail parameter to index.php, a different vulnerability than…
TI-2012-04782 CVE-2012-5685 · GHSA-3xpw-53xv-79gm
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to…
Priority LOW 37
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default UR…
TI-2012-04780 CVE-2012-5683 · GHSA-xq2x-8w8c-2hw4
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier…
Priority LOW 32
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create new FTP users via a CreateFTP act…
TI-2012-04781 CVE-2012-5684 · GHSA-pv6c-cg8w-h6mw
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote…
Priority LOW 26
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the my_account modul…