The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.Referenceshttp://www.securityfocus.com/bid/1710https://exchange.xforce.ibmcloud.com/vulnerabilities/5284http://www.securityfocus.com/archive/1/84766