Security issue urgent

[Jettaman]

Hello to everybody. I am using sentora as my panel many year, since zpanel 1.0.0.0.
I am the only one that can 

Yesterday i executed a php function that returned me the full access to sentora db.

echo shell_exec("cat /etc/sentora/panel/cnf/db.php");

* @author Bobby Allen (ballen@bobbyallen.me)
* @copyright ZPanel Project (http://www.zpanelcp.com/)
* @link http://www.zpanelcp.com/
* @license GPL (http://www.gnu.org/licenses/gpl.html)
*/
$host = 'localhost';
$dbname = 'sentora_core';
$user = 'root';
$pass = 'xxxxxxxxxxxxxxxxx';

Did i do something wrong during the installation?

Thank you

 
Hi Johnnyp,

Could you explain more in detail... 

What version of Sentora are you using? You can find this by login into Control Panel then go to ADMIN->UPDATES.

What version of PHP?

How did you run the PHP Function-

Code:

echo shell_exec("cat /etc/sentora/panel/cnf/db.php");

Did you run it from a php script in a vhost or add it to somewhere in panel like text input??? Im here to help.