According to Pagoda official news, there is a serious vulnerability in the official version 7.4.2

The server where the Pagoda panel is installed passes IP:888/ pma can directly enter the database background and make any modifications and deletions to the database.

At present, the official has urgently notified all users who use the Pagoda Panel, and issued an upgrade notice for the Pagoda Panel in the official forum, QQ group, and public account, and urgently fixed the current bug

Here, it is recommended that in terms of port release, you only need to release the required ports such as 80, 443 and not open other ports, which can greatly improve the security of the website (113 Information Network)

It is recommended to block the 888 port

The following is the official statement of Pagoda:

Pagoda is constantly growing. To this end, we will collect feedback and suggestions from users

, coupled with the continuous thinking of our team, we will All collected and discovered information is processed into the Pagoda panel, and updates are released every Wednesday. Updates include: BUG fixes, stability upgrades, user experience optimization, and new feature additions. In addition to daily updates every Wednesday, when we discover security-related bugs, we will fix them within 24 hours and release updates immediately. Because Pagoda Panel is server software, we are very concerned about security.