Zpanelcp Zpanel — known CVE vulnerabilities

Every CVE whose affected-product data names Zpanelcp Zpanel, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2012-5686 — CVSS 9.8 (critical): ZPanel 10.0.1 has insufficient entropy for its password reset process.
• CVE-2012-5685 — CVSS 7.5 (high): SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress…
• CVE-2012-6654 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2012-5683 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication…
• CVE-2012-5684 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via…