CVE-2021-3021

ISPConfig before 3.2.2 allows SQL injection...

CVE-2021-3021

CVE-2021-3021 affects ISPConfig before 3.2.2. The root cause is a lack of validation of externally-entered SQL statements in database-based applications, enabling SQL injection. Documented impact includes the ability to execute arbitrary SQL commands via the vulnerable web management software; ex...

ISPConfig SQL injection vulnerability

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...

CVE-2021-3021: Improper Neutralization of Special Elements used in an SQL Command

ISPConfig before 3.2.2 allows SQL injection...

PT-2021-18664

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.2.2 Description The issue allows SQL injection. Recommendations For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue...

ISPConfig SQL Injection Vulnerability

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...

CVE-2020-9398

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

CVE-2020-9398

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

Sql injection

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

CVE-2020-9398

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

CVE-2020-9398

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

CVE-2020-9398

ISPConfig vulnerability CVE-2020-9398 affects ISPConfig before 3.1.15p3. When the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, it enables an SQL Injection in the web control panel. This is the underlying root cause: enabling a hidden option in the reverse proxy panel...

PT-2020-20633

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.1.15p3 Description The issue allows SQL Injection when the undocumented reverse proxy panel allowed=sites option is manually enabled. Recommendations For versions prior to 3.1.15p3, update to version 3.1.15p3 or...

CVE-2020-9398: Improper Neutralization of Special Elements used in an SQL Command

ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...

CVE-2013-3629

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution...

Code injection

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution...

CVE-2013-3629

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution...

CVE-2013-3629

CVE-2013-3629 affects ISPConfig 3.0.5.2. The Red Hat/NVD/CVE records and related sources describe an Arbitrary PHP Code Execution vulnerability. The root cause is a flaw in ISPConfig’s content/language handling that allows an authenticated user to cause arbitrary PHP code execution on the server ...

CVE-2013-3629: Undefined Security Weakness

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution...

PT-2020-7455

Name of the Vulnerable Software and Affected Versions: ISPConfig version 3.0.5.2 Description: The issue allows for arbitrary PHP code execution. Recommendations: For ISPConfig version 3.0.5.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability...