The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the