CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...

CVE-2023-46818

ISPConfig before 3.2.11p1 is affected by a PHP code injection in the language file editor when admin_allow_langedit is enabled. Exploitation requires an authenticated administrator and can lead to arbitrary PHP code execution, potentially full server compromise (CWE-94). Affected component: langu...