Description
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php.
References
- 14602 third-party-advisory
- 20050320 Re: Few remote bugs in zPanel mailing-list
- zpanel-reinstall-security-bypass(19711) vdb-entry
- 20050315 Few remote bugs in zPanel mailing-list