Lpanel 1.59 and earlier, and other versions before 1.597, allows...

2.1 CVSS

Vulnerability Description

Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, (2) close, open, or respond to arbitrary support tickets via the close, open, or pid parameter to view_ticket.php, (3) obtain sensitive information on arbitrary invoices via the inv parameter to viewreceipt.php, or (4) modify domain information for arbitrary domains via the editdomain parameter to domains.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1932

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from lpanel

View All →

CVE-2005-1877

Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and...

Medium 4.3

Affected Vendor

lpanel

View all reports →

Affected Software

lpanel

Vulnerable Versions:

1.59, 1.593, 1.594, 1.596

Timeline

Official Publish: June 30th, 2005

Last Modified: September 17th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.