Vendor
Ajenti versions prior to 2.2.13 contain an improper access control vulnerability that allows an unauthenticated remote attacker to execute arbitrary code on the host server.