lpanelPlain.txt

Subject: Lpanel.NET's Lpanel all versions up to and including 1.59 is vulnerable to plain-text session credential leakage via script injection. Severity: High; Full access to all client functions can be obtained with little effort, putting entire installations of the software and its users at ris...