| عنوان | Xiaopi Web Application Firewall V1.0.0 Bypass |
|---|
| الوصف | The vulnerability exists in the official WAF firewall of Xiaopi Panel, where inadequate filtering of user input by WAF rules allows attackers to execute malicious code through carefully crafted injection statements. Although WAF protection is in place, attackers can still bypass restrictions using specific formats and encoding techniques to achieve injection attacks. |
|---|
| المصدر | ⚠️ https://github.com/ltranquility/vuln_submit/issues/1 |
|---|
| المستخدم | Customer (UID 83474) |
|---|
| ارسال | 16/03/2026 02:19 PM (7 أشهر منذ) |
|---|
| الاعتدال | 01/04/2026 03:58 PM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 354666 [Xiaopi Panel 1.0.0 WAF Firewall /demo.php param البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|