Description (CNA)
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/14602
- http://marc.info/?l=bugtraq&m=111142323616309&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19711
- http://marc.info/?l=bugtraq&m=111090324111053&w=2
ADP enrichment
No English description supplied.