155 matches found
CVE-2023-46818
CVE-2023-46818 - ISPConfig PHP-Codeausf├╝hrung | Exploit Hohe Codeausf├╝hrung aus der Ferne in ISPConfig PoC-Implementierung. Zusammenfassung ISPConfig-Versionen /admin/languageedit.php тАФ verwundbarer Endpunkt von ISPConfig...
CVE-2023-46818
Metasploit-Modul Metasploit-Modul root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Ein Problem wurde in ISPConfig vor Version 3.2.11p1 entdeckt. PHP-Code-Injection kann im...
CVE-2023-46818
Exploit Python para CVE-2023-46818 ЁЯФе Descri├з├гo Este script de exploit em Python visa uma vulnerabilidade de seguran├зa no par├вmetro POST records do ISPConfig para /admin/languageedit.php, que n├гo ├й devidamente sanitizado. Isso permite que um administrador autenticado injete e execute c├│digo PHP...
CVE-2023-46818
CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash CVE-2023-46818 Iniezione di codice PHP autenticata in ISPConfig per maggiori dettagli: advisory CVE-2023-46818 PoC Introduzione Le versioni ISPConfig Nota: questo exploit richiede credenziali amministrative ISPConfig valide e...
CVE-2023-46818-python-exploit
CVE-2023-46818 exploit Questa ├и una versione Python dello script PHP originale per la vulnerabilit├а che interessa ispconfig 3.2.11 e versioni precedenti. Sorgente PHP originale: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html Questa proof-of-concept ├и intesa...
CVE-2023-46818
CVE-2023-46818 ISPConfig - PHP рдХреЛрдб рдЗрдВрдЬреЗрдХреНрд╢рди PoC рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ Bash рдкрд░рд┐рдЪрдп ISPConfig рдХреЗ рд╕рдВрд╕реНрдХрд░рдг = 3.2.11, /admin/languageedit.php рдПрдВрдбрдкреЙрдЗрдВрдЯ рдореЗрдВ records рдкреИрд░рд╛рдореАрдЯрд░ рдХреЗ рдорд╛рдзреНрдпрдо рд╕реЗ рдПрдХ рдкреНрд░рдорд╛рдгрд┐рдд PHP рдХреЛрдб рдЗрдВрдЬреЗрдХреНрд╢рди рднреЗрджреНрдпрддрд╛ рдХреЗ рд▓рд┐рдП рд╕рдВрд╡реЗрджрдирд╢реАрд▓ рд╣реИрдВред рдПрдХ рджреБрд░реНрднрд╛рд╡рдирд╛рдкреВрд░реНрдг рдкреНрд░рдорд╛рдгрд┐рдд рд╡реНрдпрд╡рд╕реНрдерд╛рдкрдХ рдЙрдкрдпреЛрдЧрдХрд░реНрддрд╛ рдЗрд╕рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░рдХреЗ рдордирдорд╛рди...
CVE-2023-46818-Exploit
CVE-2023-46818-Exploit Dies ist mein eigener Exploit f├╝r CVE-2023-46818. Viel Spa├Я beim Hacken! Dieser Exploit automatisiert den in CVE-2023-46818 beschriebenen Angriff, indem er eine PHP-Code-Injection-Schwachstelle in ISPConfig Version 3.2.11 und fr├╝her ausnutzt. Er meldet sich mit g├╝ltigen...
CVE-2023-46818
CVE-2023-46818 ISPConfig 3.2.11p1 рд╕реЗ рдкрд╣рд▓реЗ рдХреЗ рд╕рдВрд╕реНрдХрд░рдг рдореЗрдВ рдПрдХ рд╕рдорд╕реНрдпрд╛ рдкрд╛рдИ рдЧрдИред рдпрджрд┐ adminallowlangedit рд╕рдХреНрд╖рдо рд╣реИ, рддреЛ рдПрдХ рд╡реНрдпрд╡рд╕реНрдерд╛рдкрдХ рджреНрд╡рд╛рд░рд╛ рднрд╛рд╖рд╛ рдлрд╝рд╛рдЗрд▓ рд╕рдВрдкрд╛рджрдХ рдореЗрдВ PHP рдХреЛрдб рдЗрдВрдЬреЗрдХреНрд╢рди рдХрд┐рдпрд╛ рдЬрд╛ рд╕рдХрддрд╛ рд╣реИред рдЙрдкрдпреЛрдЧ root@kitploit: тЭп python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818...
ISPConfig - PHP Code Injection
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...
CVE-2026-61518
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
CVE-2026-61518
ISPConfig contains an authenticated SQL injection vulnerability in its Remote API . The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not ...
EUVD-2026-62663
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
CVE-2026-61518 ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
PT-2026-78543
Name of the Vulnerable Software and Affected Versions ISPConfig affected versions not specified Description An authenticated SQL injection exists in the Remote API. The primary id parameter used in delete and update API methods is concatenated directly into SQL WHERE clauses without integer casti...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
EUVD-2025-209641
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
