Lucene search
+L

155 matches found

Kitploit
Kitploit
added 2026/09/13 4:07 a.m.5 views

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash CVE-2023-46818 Authenticated PHP Code Injection in ISPConfig for more details: advisory CVE-2023-46818 PoC Introduction ISPConfig versions Note: This exploit requires valid ISPConfig admin credentials and will deploy a command web she...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.202 views

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

7.2CVSS7.1AI score0.15732EPSS
SaveExploits14References4
Kitploit
Kitploit
added 2026/09/12 10:39 p.m.4 views

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit Este es mi propio exploit para CVE-2023-46818 ¡feliz hacking! Este exploit automatiza el ataque descrito en CVE-2023-46818 aprovechando una vulnerabilidad de inyección de código PHP en ISPConfig versión 3.2.11 y anteriores. Inicia sesión en el panel de ISPConfig utilizando...

7.2CVSS7.2AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 10:17 p.m.2 views

CVE-2023-46818-python-exploit

CVE-2023-46818 exploit This is a python version of the original php script for the vulnerability affecting ispconfig 3.2.11 and previous versions. Original PHP source: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html This proof-of-concept is intended for...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 9:09 p.m.7 views

CVE-2023-46818

CVE-2023-46818 Python Exploit 🔥 Description This Python exploit script targets a security vulnerability in ISPConfig's records POST parameter to /admin/languageedit.php, which is not properly sanitized. This allows an authenticated admin to inject and execute arbitrary PHP code. ⚠️ Affected...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 6:52 p.m.4 views

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig =...

7.2CVSS7.2AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 12:10 p.m.6 views

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...

7.2CVSS7.8AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 9:57 a.m.12 views

CVE-2023-46818

Metasploit-module Módulo de Metasploit root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr una inyección ...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/06 8:00 a.m.7 views

CVE-2023-46818

CVE-2023-46818 - Ejecución de Código PHP en ISPConfig | Exploit Alta Ejecución Remota de Código en ISPConfig Implementación del PoC. Resumen Las versiones de ISPConfig /admin/languageedit.php — endpoint vulnerable de ISPConfig 🚀 Lanzando el Exploit...

7.2CVSS7.4AI score0.15732EPSS
SaveExploits14
NVD
NVD
added 2026/08/19 6:16 p.m.11 views

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

8.8CVSS0.00312EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/19 5:45 p.m.46 views

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in its Remote API . The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not ...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/19 5:45 p.m.21 views

EUVD-2026-62663

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/19 5:45 p.m.42 views

CVE-2026-61518 ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

8.8CVSS0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.23 views

PT-2026-78543

Name of the Vulnerable Software and Affected Versions ISPConfig affected versions not specified Description An authenticated SQL injection exists in the Remote API. The primary id parameter used in delete and update API methods is concatenated directly into SQL WHERE clauses without integer casti...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:51 p.m.19 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS5.5AI score0.00213EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/05/05 6:33 p.m.17 views

EUVD-2025-209641

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS5.8AI score0.00213EPSS
SaveExploits1References3
NVD
NVD
added 2026/05/05 4:16 p.m.19 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS0.00213EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/05/05 12:00 a.m.9 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

5.8AI score0.00213EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/05 12:00 a.m.40 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. The vulnerability affects the ISPConfig system-status UI, specifically the monitor/show_sys_state.php endpoint (state=server&server=[removed]...), allowing reflected user-supplied input to execute script in...

4.7CVSS5.8AI score0.00213EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 12:00 a.m.7 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS5.8AI score0.00213EPSS
SaveExploits1References3
Rows per page
Query Builder