The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Control_panel |
Alabanza |
* |
3.0 (including) |
References