Approved changes feed: RSS · Atom

cpe:2.3:a:eliz_software:panel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEliz Software (7ed2c20c-a307-5689-be07-d67dec307fb3)
ProductPanel (03d78bff-aad2-5490-a007-d5d3db6dbed4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6878 vulnerable 2026-06-08 06:58:20.643384 Directory Browsing in Eliz Software's Panel
Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations. This issue affects Panel: before v2.3.24.
Published: 2024-09-18T14:55:24.769Z
Updated: 2026-06-03T12:09:38.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6877 vulnerable 2026-06-08 06:58:20.642007 Reflected XSS in Eliz Software's Panel
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS. This issue affects Panel: before v2.3.24.
Published: 2024-09-18T14:51:32.753Z
Updated: 2026-06-03T12:11:04.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5960 vulnerable 2026-06-08 06:56:18.079185 Plaintext Storage of a Password in Eliz Software's Panel
CRITICAL (9.8)
Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials. This issue affects Panel: before v2.3.24.
Published: 2024-09-18T14:49:32.180Z
Updated: 2026-06-03T12:50:33.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5959 vulnerable 2026-06-08 06:56:18.078785 Stored XSS in Eliz Software's Panel
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24.
Published: 2024-09-18T14:44:44.294Z
Updated: 2026-06-03T12:51:45.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5958 vulnerable 2026-06-08 06:56:18.077565 SQLi in Eliz Software's Panel
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection. This issue affects Panel: before v2.3.24.
Published: 2024-09-18T14:42:04.465Z
Updated: 2026-06-03T12:52:45.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.