The Webuzo Team has released Webuzo 2.1.4
This version of Webuzo fixes a critical bug.
A complete list of changes:
1) Bug Fix : Remote OS command injection due to insufficient input validation. This is fixed now.
2) Bug Fix : Reflected cross-site scripting on File Manager module. This is fixed now.
3) Bug Fix : User enumeration on Webuzo login page. This is fixed now.
Username will not be pre-filled by default on the login page. Users can manage the setting from the Admin Panel.
Note : This bug was present in Webuzo 2.1.3 and lower versions
Note : If you have disabled Auto update (enabled by default) please update your installation to Webuzo 2.1.4
The Webuzo Team
WEBUZO - Single User Control Panel for your VPS/Cloud/Server (CentOS/Ubuntu)
Install NGINX, Apache, MySQL, LAMP, LEMP, PHP, Java and 310+ popular scripts by a CLICK
Email Server, Database Management, Domain Management, FTP Management, CSF, CRON