Sql injection

2020-02-2521:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.

CPENameOperatorVersion
ispconfigeq3.1.15
ispconfigeq3.1.15 p1
ispconfigeq3.1.15 p2
ispconfiglt3.1.15

Name	Operator	Version
ispconfig	eq	3.1.15
ispconfig	eq	3.1.15 p1
ispconfig	eq	3.1.15 p2
ispconfig	lt	3.1.15

References

www.ispconfig.org/blog/ispconfig-3-1-15p3-released-security-bugfix-release/