Sorry if the post came across rude, but it seems that Sentora has been dead in the water for a while. The problem is that if there are indeed only two people working on it, then efforts need to be made to recruit / locate additional people to offer assistance.
Security is important, and I run the apt-get update / apt-get upgrade commands weekly, there are no new updates which will affect the mentioned security issues.
I'm a little hesitant to upload my security report directly here, as it could possibly be used to exploit the problem mentioned as there URLS and Directories listed in the report.
My point is, Sentora is way behind, it's not even acceptable to request users to use the old versions of PHP and Sentora should be updated to include the latest version of PHP (or at least the ability to choose), an up-to-date OS with the latest security and background processes as well as upgradability as time goes on.
I really love this panel, I've used plenty more, including a new service called CyberPanel, but honestly, I just prefer Sentora's feel and the fact I know my way around the back end enough to make the necessary changes.
Security is important, and I run the apt-get update / apt-get upgrade commands weekly, there are no new updates which will affect the mentioned security issues.
I'm a little hesitant to upload my security report directly here, as it could possibly be used to exploit the problem mentioned as there URLS and Directories listed in the report.
My point is, Sentora is way behind, it's not even acceptable to request users to use the old versions of PHP and Sentora should be updated to include the latest version of PHP (or at least the ability to choose), an up-to-date OS with the latest security and background processes as well as upgradability as time goes on.
I really love this panel, I've used plenty more, including a new service called CyberPanel, but honestly, I just prefer Sentora's feel and the fact I know my way around the back end enough to make the necessary changes.