| Название | Xiaopi Web Application Firewall V1.0.0 Bypass |
|---|
| Описание | The vulnerability exists in the official WAF firewall of Xiaopi Panel, where inadequate filtering of user input by WAF rules allows attackers to execute malicious code through carefully crafted injection statements. Although WAF protection is in place, attackers can still bypass restrictions using specific formats and encoding techniques to achieve injection attacks. |
|---|
| Источник | ⚠️ https://github.com/ltranquility/CVE/issues/37 |
|---|
| Пользователь | Customer (UID 83474) |
|---|
| Представление | 26.01.2026 16:21 (8 месяцы назад) |
|---|
| Модерация | 06.02.2026 15:51 (11 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 344695 [Xiaopi Panel до 20260126 WAF Firewall /demo.php id SQL-инъекция] |
|---|
| Баллы | 18 |
|---|