SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php.
| Software | From | Fixed in |
|---|---|---|
| zpanel / zpanel | 2.5_beta9 | 2.5_beta9.x |
| zpanel / zpanel | 2.5_beta10 | 2.5_beta10.x |
| zpanel / zpanel | 2.0 | 2.0.x |
| zpanel / zpanel | 2.5_beta | 2.5_beta.x |