CVE-2005-0792: Zpanel

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php.

Affected products

• Zpanel Zpanel: version 2.0 only; version 2.5_beta only; version 2.5_beta9 only; version 2.5_beta10 only

Published 2005-03-15. Last modified 2026-06-16.