Panalog vulnerabilities

2 known vulnerabilities in Panalog from Panabit. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  panalog: Incomplete Identification of Uploaded File Variables (PHP)

  CVE-2024-31601Apr 26, 2024Panabit

  An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows attackers to execute arbitrary code via the exportpdf.php component.

• 9.8 Critical severity

  Panalog: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-2014Mar 21, 2024PanabitEPSS 1.13%

  A vulnerability classified as critical was found in Panabit Panalog 202103080942. This vulnerability affects unknown code of the file /Maintain/sprog_upstatus.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely