CVE-2024-53584

OpenPanel v0.3.4 is affected by an OS command injection vulnerability (CWE-78) originating from the timezone parameter . An attacker can exploit this flaw to execute arbitrary system commands on the server. A proof-of-concept exploit is available, demonstrating command execution via a POST reques...

CVE-2024-53537

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager...