CVE-2017-15974: Datacomponents Tpanel

Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days.

tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.

Affected products

• Datacomponents Tpanel: version 2009 only

Published 2017-10-29. Last modified 2026-06-17.