CVE Catalog
CVE-2017-15974
CriticalSummary
tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.
Risk Assessment
An attacker can gain access to the system without valid credentials, posing a serious threat to data security.
Recommendation
It is recommended to update tPanel to the latest version and implement protections against SQL injection attacks.
Original NVD description (English source)
tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.