Description
1Panel存在sql注入漏洞，该漏洞是由于应用对请求头中的user-agent的值验证不当造成的。
1Panel CVE-2024-39911 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-39911
https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7m53-pwp6-v3f5
https://avd.aliyun.com/detail?id=AVD-2024-39911
https://blog.mo60.cn/index.php/archives/1Panel_SQLinjection2Rce.html
https://cn-sec.com/archives/2989788.html
https://stack.chaitin.com/vuldb/detail/b7c60531-28a9-46c9-97c0-0f6f27d4c786
https://linux.do/t/topic/155571
https://www.ctfiot.com/208339.html
https://www.bilibili.com/video/BV1tt8ue6EmU/
https://qkl.seebug.org/vuldb/ssvid-99864
https://blog.fit2cloud.com/?p=01541924-7dc6-429d-bd14-faae00bc9f76