CVE-2020-28657: Improper Neutralization of Special Elements used in an SQL Command

In bPanel 2.0, the administrative ajax endpoints aka ajax/aj.php are accessible without authentication and allow SQL injections, which could lead to platform compromise...