SQLi bug exposes 1Panel users to remote hijacking
by Loki - Wednesday July 31, 2024 at 02:14 AM
The God of Stories
Member
Posts: 2,420
Threads: 65
Joined: Jun 2024
Reputation: 1,818

#1
07-31-2024, 02:14 AM
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs.
Hidden Content
You must register or login to view this content.


Omnicer
Reply
Get Rich or Die Tryin'
user_34006
Posts: 195
Threads: 62
Joined: Sep 2023
Reputation: 1,658

#2
07-31-2024, 02:16 AM
highkey doubt ts
Reply
RaidForums
Member
Posts: 47
Threads: 1
Joined: Jul 2024
Reputation: 0

#3
07-31-2024, 11:32 PM
Nice interesting loki lets to see
Reply
Advanced User

Posts: 98
Threads: 18
Joined: Nov 2023
Reputation: 31

#4
08-08-2024, 06:22 AM
Looks interesting thanks i check this one out...but seems kinda similar
Reply
The God of Stories
Member
Posts: 2,420
Threads: 65
Joined: Jun 2024
Reputation: 1,818

#5
08-08-2024, 10:24 AM
(08-08-2024, 06:22 AM)Banuk Wrote: Looks interesting thanks i check this one out...but seems kinda similar

Similar to what?
Reply
Advanced User

Posts: 98
Threads: 18
Joined: Nov 2023
Reputation: 31

#6
08-08-2024, 12:54 PM (This post was last modified: 08-08-2024, 12:55 PM by Banuk.)
yeah this one CVE-2024-39907 which is the case...
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Cool Remote Patching ETW/Amsi PoC pepeloco 6 2,092 02-08-2026, 07:58 AM
Last Post: zeroday99
  Craft CMS time-based blind SQLi : POC Loki 3 753 08-11-2025, 04:17 PM
Last Post: purebumps
  CVE-2025-47812 - Wing FTP Server Remote Code Execution (RCE) thermos 9 493 08-11-2025, 06:16 AM
Last Post: duyolahax
  Palo-Alto-Expedition-Remote-Code result 17 2,015 08-11-2025, 04:21 AM
Last Post: layerseven
  Craft CMS 4.4.14 - Unauthenticated Remote Code Execution Loki 13 1,102 04-06-2025, 10:05 PM
Last Post: cobrinha



 Users browsing this thread: 1 Guest(s)