On February 1, 2010, the Froxlor 0.9 was released, and it was a fork of the SysCP project. It introduced multiple bug fixes and was seen as an intermediate step between SysCP and the Froxlor 1.0 release.[5]
In 2015, it was revealed that versions prior to 0.9.33.1 contained a database security vulnerability which was fixed in the next version.[7] This vulnerability allowed attackers to remotely read database passwords from the publicly accessed folder /logs/sql-error.log. MySQL errors, which were logged in this folder, contained database logins and passwords, although the passwords were visible only up to 15 characters.[8]
On April 10, 2019, version 0.10.0 was released. The main change was the introduction of the API backend.[9]
On January 8, 2023, version 2.0 was released. The UI was redesigned to be more customizable. The installation process was made easier and allowed the SSL activation directly within the installation process. Also, this update introduced the command line tool.[10]
On December 8, 2023, version 2.1 was released. New features include the ability to duplicate domains (use settings from the existing domain for the new domain), deactivate single domains and ftp-accounts, and generate one-time login-links for customers via CLI or API.[11]
