weaweawe01

[security]1panel 存在信息泄露漏洞、存在本地提权漏洞

9

### 联系方式 [weaweawe01](https://github.com/weaweawe01) ### 1Panel 版本 所有版本 ### 问题描述 **提交到security 页面没人看的。只能提交到 issues 了** 1panel 信息泄露。泄露管理员账户 ##POC POST /api/v1/auth/init HTTP/1.1 Host: xxxxxx Content-Length: 48 Accept: application/json, text/plain, */* X-CSRF-TOKEN: User-Agent: Mozilla/5.0...

SQL bypass

1

1' union distinctrow select 1,2,3,4,user() This cannot be determined through analysis. How can I add this distincrow to sqli_ In lexer.re2c

If executed in the browser, alert (1) will be executed successfully. ```html a123lert( ```  I don't know which method to use now. The content obtained by enabling recognizeCDATA is...

Hello, I have encountered an issue while using it. I hope you can help me answer my questions. Thank you very much html ``` ```  It should be src=xxxx...