CVE-2024-39907 Scanner
CVE-2024-39907 Scanner - SQL Injection (SQLi) vulnerability in 1Panel
Used 2.3k times · 4.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-39907
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
1panel
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: 1panel
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →