Panda Xgo vulnerabilities
We track 4 vulnerabilities in Panda Xgo products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2024.
Latest Panda Xgo vulnerabilities
- 9.8 Critical severity
PandaX: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in PandaXGO PandaX up to 20240310. It has been classified as critical. Affected is an unknown function of the file /apps/system/router/upload.go of the component File Extension Handler. The manipulation of the argument file leads to u
- 7.3 High severity
PandaX: Path Traversal: '../filedir'
A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack
- 9.8 Critical severity
PandaX: Path Traversal: '../filedir'
A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upload.go. The manipulation of the argument fileName with the input ../../../../../
- 9.8 Critical severity
PandaX: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the file /apps/system/services/role_menu.go. The manipulation of the argument roleKey leads to sql injection. It is possible