GCVE - cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zpanel:zpanel:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Zpanel (`80263c00-c370-52a8-923e-ad9cf7eacd50`)
Product	Zpanel (`0257f46d-cec4-58be-8437-3ab6d767ff1d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/infoglans/zpanelcp`	purl2cpe	2026-06-01 10:16:47.086304
`pkg:github/zpanel/zpanel`	purl2cpe	2026-06-01 10:16:47.086307
`pkg:sourceforge/zpanelcp`	purl2cpe	2026-06-01 10:16:47.086311

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1123`	vulnerable	2026-06-08 04:49:41.505234	Details available Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the body parameter to templates/ZPanelV2/template.php or (2) the page parameter to zpanel.php. NOTE: the zpanel.php vector may overlap CVE-2005-0793.2. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2007-02-27T02:00:00.000Z Updated: 2024-08-07T12:43:22.641Z Open on db.gcve.eu Reference links http://osvdb.org/33498 https://exchange.xforce.ibmcloud.com/vulnerabilities/32659 http://www.vupen.com/english/advisories/2007/0710 http://www.securityfocus.com/bid/22683 http://secunia.com/advisories/24275	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0794`	vulnerable	2026-06-08 04:48:13.680131	Details available ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php. Published: 2005-03-20T05:00:00.000Z Updated: 2024-08-07T21:28:28.432Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14602 http://marc.info/?l=bugtraq&m=111142323616309&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19711 http://marc.info/?l=bugtraq&m=111090324111053&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0793`	vulnerable	2026-06-08 04:48:13.679778	Details available PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (2) include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter. Published: 2005-03-20T05:00:00.000Z Updated: 2024-08-07T21:28:28.135Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=111142323616309&w=2 http://marc.info/?l=bugtraq&m=111090324111053&w=2 http://www.securityfocus.com/bid/12809	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0792`	vulnerable	2026-06-08 04:48:13.677177	Details available SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php. Published: 2005-03-20T05:00:00.000Z Updated: 2024-08-07T21:28:28.360Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14602 http://marc.info/?l=bugtraq&m=111142323616309&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19709 http://marc.info/?l=bugtraq&m=111090324111053&w=2 http://www.securityfocus.com/bid/12809	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Zpanel

Notes

PURL mappings

Vulnerability references

Contribute