CVE-2024-53584

OpenPanel v0.3.4 is vulnerable to an OS command injection vulnerability triggered via the timezone parameter . An attacker can exploit this flaw to execute arbitrary system commands on the server. A proof-of-concept exploit has been published, demonstrating the ability to execute commands such as...

CVE-2024-53537

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager...