Vulnerability Description
SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients module to the default URI.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zpanelcp | Zpanel | <= 10.0.1 |
Related Weaknesses (CWE)
References
- http://osvdb.org/show/osvdb/87142
- http://secunia.com/advisories/51172
- http://www.exploit-db.com/exploits/22490Exploit
- http://osvdb.org/show/osvdb/87142
- http://secunia.com/advisories/51172
- http://www.exploit-db.com/exploits/22490Exploit
FAQ
What is CVE-2012-5685?
CVE-2012-5685 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients modu...
How severe is CVE-2012-5685?
CVE-2012-5685 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-5685?
Check the references section above for vendor advisories and patch information. Affected products include: Zpanelcp Zpanel.