| Titre | Guangdong Baota Safety Technology Co., Ltd. Baota Linux Panel <= 11.1 SQL Injection |
|---|
| Description | The Baota Linux panel backend is vulnerable to SQL injection attacks when obtaining database access permissions.
Product Source:https://github.com/aaPanel/BaoTa
User Manual:http://docs.bt.cn
Installation command:
Centos：yum install -y wget && wget -O install.sh http://download.bt.cn/install/install_6.0.sh && sh install.sh
Ubuntu/Debian：wget -O install.sh http://download.bt.cn/install/install-ubuntu_6.0.sh && sudo bash install.sh |
|---|
| La source | ⚠️ https://github.com/coolcj-stack/BaoTa-Panel-Backstage-SQL-injection-vulnerability/blob/main/README.md |
|---|
| Utilisateur | BlackSpdier (UID 89912) |
|---|
| Soumission | 19/10/2025 11:43 (il y a 8 mois) |
|---|
| Modérer | 08/11/2025 08:19 (20 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 331632 [aaPanel BaoTa jusqu’à 11.2.x Backend database?action=GetDatabaseAccess Nom injection SQL] |
|---|
| Points | 20 |
|---|