| 제목 | Xiaopi Web Application Firewall V1.0.0 Bypass |
|---|
| 설명 | The vulnerability exists in the official WAF firewall of Xiaopi Panel, where inadequate filtering of user input by WAF rules allows attackers to execute malicious code through carefully crafted injection statements. Although WAF protection is in place, attackers can still bypass restrictions using specific formats and encoding techniques to achieve injection attacks. |
|---|
| 원천 | ⚠️ https://github.com/ltranquility/CVE/issues/37 |
|---|
| 사용자 | Customer (UID 83474) |
|---|
| 제출 | 2026. 01. 26. PM 04:21 (4 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 06. PM 03:51 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 344695 [Xiaopi Panel 까지 20260126 WAF Firewall /demo.php 아이디 SQL 주입] |
|---|
| 포인트들 | 18 |
|---|