Desktop Central version 9.1.0 suffers from crlf injection, and server-side request forgery vulnerabilities.