This vulnerability (CVE-2024-5958) in Eliz Software Panel before version 2.3.24 involves improper neutralization of special elements in SQL commands, classified as CWE-89 (SQL Injection). It permits attackers to execute commands via SQL injection, potentially leading to command line execution on the affected system. The CVSS 4.0 vector indicates the vulnerability is remotely exploitable without privileges or user interaction and results in high impact on confidentiality, integrity, availability, and security controls. The vendor has not yet provided an official fix or remediation details.

Successful exploitation of this vulnerability can lead to unauthorized command line execution on the affected system, compromising confidentiality, integrity, availability, and overall security of the Eliz Software Panel. This could allow attackers to execute arbitrary commands, potentially leading to full system compromise. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the Eliz Software Panel to trusted users only and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable panel to untrusted networks. Follow vendor communications closely for updates on patch availability.