{"metadata": {"vulnerability": "cve-2024-39907", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-07-02T19:37:18.600Z", "date_only": false, "value": "2024-07-02T19:37:18.600Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-39907", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-18T07:54:53Z", "date_only": false, "value": "2024-07-18T07:54:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "record": "CVE-2024-39907", "field": "creation_timestamp", "uuid": "cdfe6c21-df44-41c6-8c26-08e5ed5d9c4d", "url": "https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6"}, {"timestamp": "2024-07-18T14:25:00Z", "date_only": false, "value": "2024-07-18T14:25:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5GRX-V727-QMQ6", "record": "GHSA-5GRX-V727-QMQ6", "field": "published"}, {"timestamp": "2024-07-18T15:31:30.892Z", "date_only": false, "value": "2024-07-18T15:31:30.892Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-39907", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-18T15:31:30.892Z", "date_only": false, "value": "2024-07-18T15:31:30.892Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-39907", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-18T16:15:07Z", "date_only": false, "value": "2024-07-18T16:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5GRX-V727-QMQ6", "record": "GHSA-5GRX-V727-QMQ6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-18T16:15:07.293Z", "date_only": false, "value": "2024-07-18T16:15:07.293", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39907", "record": "FKIE_CVE-2024-39907", "field": "published"}, {"timestamp": "2024-07-18T19:18:04Z", "date_only": false, "value": "2024-07-18T19:18:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1155", "record": "CVE-2024-39907", "field": "creation_timestamp", "uuid": "5bb7cf0d-48ad-497a-aeec-32722546b495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39907 - Panel SQL Injection Vulnerability: RCE Through Unfiltered File Writes\", \n  \"Content\": \"CVE ID : CVE-2024-39907 \nPublished : July 18, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : 1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1155"}, {"timestamp": "2024-07-18T19:36:35.882Z", "date_only": false, "value": "2024-07-18T19:36:35.882647Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-39907", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-18T19:36:35.882Z", "date_only": false, "value": "2024-07-18T19:36:35.882647Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39907", "record": "FKIE_CVE-2024-39907", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-22T13:02:34.659Z", "date_only": false, "value": "2024-07-22T13:02:34.659Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-39907", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-23T10:41:54Z", "date_only": false, "value": "2024-07-23T10:41:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/7005", "record": "CVE-2024-39907", "field": "creation_timestamp", "uuid": "9afa80fc-c96c-4754-bad7-3ba53e8d4942", "content": "\u200aCVE-2024-39907 (CVSS 9.8): SQLi Flaw Exposes 1Panel Users to Remote Takeover, PoC Published\n\nhttps://securityonline.info/cve-2024-39907-cvss-9-8-sqli-flaw-exposes-1panel-users-to-remote-takeover-poc-published/", "url": "https://t.me/HackingInsights/7005"}, {"timestamp": "2024-07-23T17:20:16Z", "date_only": false, "value": "2024-07-23T17:20:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2834", "record": "CVE-2024-39907", "field": "creation_timestamp", "uuid": "0deb8621-edfb-47a0-8ca4-17a79e5722c7", "content": "https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6\n\ncve-2024-39907\n#github #poc", "url": "https://t.me/CNArsenal/2834"}, {"timestamp": "2024-07-24T00:00:00Z", "date_only": true, "value": "2024-07-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-33554", "record": "CNVD-2024-33554", "field": "openTime"}, {"timestamp": "2024-07-24T00:00:00Z", "date_only": true, "value": "2024-07-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-33554", "record": "CNVD-2024-33554", "field": "submitTime"}, {"timestamp": "2024-07-24T13:49:36Z", "date_only": false, "value": "2024-07-24T13:49:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5GRX-V727-QMQ6", "record": "GHSA-5GRX-V727-QMQ6", "field": "modified"}, {"timestamp": "2024-07-26T05:11:20Z", "date_only": false, "value": "2024-07-26T05:11:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Kelvinseccommunity/592", "record": "CVE-2024-39907", "field": "creation_timestamp", "uuid": "a0d59c65-9759-4dfc-8145-904ea583cbf6", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "url": "https://t.me/Kelvinseccommunity/592"}, {"timestamp": "2024-07-27T12:01:41Z", "date_only": false, "value": "2024-07-27T12:01:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10884", "record": "CVE-2024-39907", "field": "creation_timestamp", "uuid": "d8f273f2-1902-425b-971f-02854188ef6f", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "url": "https://t.me/CyberSecurityTechnologies/10884"}, {"timestamp": "2024-08-02T04:33:11.402Z", "date_only": false, "value": "2024-08-02T04:33:11.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-39907", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T04:33:11.402Z", "date_only": false, "value": "2024-08-02T04:33:11.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-39907", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:43:00.173Z", "date_only": false, "value": "2026-06-17T07:43:00.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39907", "record": "FKIE_CVE-2024-39907", "field": "lastModified"}]}