155 matches found
CVE-2023-46818
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...
Code injection
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...
CVE-2023-46818
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...
ISPConfig Security Vulnerability
ISPConfig is a set of Linux-based open source hosting control panel, which allows you to manage multiple servers, open web sites, monitor server operation status, etc. via a web control panel. A security vulnerability exists in ISPConfig versions prior to 3.2.11p1, which stems from the fact that ...
CVE-2023-46818
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...
PT-2023-30234 · Ispconfig · Ispconfig
Name of the Vulnerable Software and Affected Versions: ISPConfig versions prior to 3.2.11p1 Description: An issue was discovered that allows PHP code injection in the language file editor by an admin if admin allow langedit is enabled. This issue can be exploited to achieve PHP code injection...
CVE-2023-46818
ISPConfig before 3.2.11p1 is affected by a PHP code injection in the language file editor when admin_allow_langedit is enabled. Exploitation requires an authenticated administrator and can lead to arbitrary PHP code execution, potentially full server compromise (CWE-94). Affected component: langu...
ISPConfig language_edit.php PHP Code Injection
This module exploits a PHP code injection vulnerability in ISPConfig's languageedit.php file. The vulnerability occurs when the adminallowlangedit setting is enabled, allowing authenticated administrators to inject arbitrary PHP code through the language editor interface. This module will...
ISPConfig SQL Injection Vulnerability (CNVD-2021-02036)
ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...
CVE-2021-3021
ISPConfig before 3.2.2 allows SQL injection...
CVE-2021-3021
ISPConfig before 3.2.2 allows SQL injection...
CVE-2021-3021
ISPConfig before 3.2.2 allows SQL injection...
Sql injection
ISPConfig before 3.2.2 allows SQL injection...
CVE-2021-3021
ISPConfig before 3.2.2 allows SQL injection...
CVE-2021-3021
CVE-2021-3021 affects ISPConfig before 3.2.2. The root cause is a lack of validation of externally-entered SQL statements in database-based applications, enabling SQL injection. Documented impact includes the ability to execute arbitrary SQL commands via the vulnerable web management software; ex...
ISPConfig SQL注入漏洞
ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...
ISPConfig SQL Injection Vulnerability
ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...
CVE-2020-9398
ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...