Lucene search
+L

155 matches found

Kitploit
Kitploit
added 2026/09/13 4:07 a.m.5 views

CVE-2023-46818

CVE-2023-46818 ISPConfig - Exploit PoC de inyección de código PHP Bash CVE-2023-46818 Inyección de código PHP autenticada en ISPConfig para más detalles: aviso CVE-2023-46818 PoC Introducción Las versiones ISPConfig Nota: Este exploit requiere credenciales válidas de administrador de ISPConfig y...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.202 views

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

7.2CVSS7.1AI score0.15732EPSS
SaveExploits14References4
Kitploit
Kitploit
added 2026/09/12 10:39 p.m.4 views

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-46818 happy hacking! This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials...

7.2CVSS7.2AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 10:17 p.m.2 views

CVE-2023-46818-python-exploit

Exploit de CVE-2023-46818 Esta es una versión en Python del script PHP original para la vulnerabilidad que afecta a ISPConfig 3.2.11 y versiones anteriores. Código fuente PHP original: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html Esta prueba de concepto...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 9:09 p.m.7 views

CVE-2023-46818

Exploit en Python para CVE-2023-46818 🔥 Descripción Este script de exploit en Python apunta a una vulnerabilidad de seguridad en el parámetro records de ISPConfig en /admin/languageedit.php, el cual no se sanitiza correctamente. Esto permite que un administrador autenticado inyecte y ejecute códi...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 6:52 p.m.4 views

CVE-2023-46818

CVE-2023-46818 Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr la inyección de código PHP en el editor de archivos de idioma por parte de un administrador si adminallowlangedit está habilitado. Uso root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3...

7.2CVSS7.2AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 12:10 p.m.6 views

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...

7.2CVSS7.8AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 9:57 a.m.12 views

CVE-2023-46818

Metasploit-module Módulo de Metasploit root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr una inyección ...

7.2CVSS7.3AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/06 8:00 a.m.7 views

CVE-2023-46818

CVE-2023-46818 - Ejecución de Código PHP en ISPConfig | Exploit Alta Ejecución Remota de Código en ISPConfig Implementación del PoC. Resumen Las versiones de ISPConfig /admin/languageedit.php — endpoint vulnerable de ISPConfig 🚀 Lanzando el Exploit...

7.2CVSS7.4AI score0.15732EPSS
SaveExploits14
NVD
NVD
added 2026/08/19 6:16 p.m.11 views

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

8.8CVSS0.00312EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/19 5:45 p.m.46 views

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in its Remote API . The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not ...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/19 5:45 p.m.21 views

EUVD-2026-62663

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/19 5:45 p.m.42 views

CVE-2026-61518 ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

8.8CVSS0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.23 views

PT-2026-78543

Name of the Vulnerable Software and Affected Versions ISPConfig affected versions not specified Description An authenticated SQL injection exists in the Remote API. The primary id parameter used in delete and update API methods is concatenated directly into SQL WHERE clauses without integer casti...

8.8CVSS6.1AI score0.00312EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:51 p.m.19 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS5.5AI score0.00213EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/05/05 6:33 p.m.17 views

EUVD-2025-209641

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS5.8AI score0.00213EPSS
SaveExploits1References3
NVD
NVD
added 2026/05/05 4:16 p.m.18 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS0.00213EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/05/05 12:00 a.m.9 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

5.8AI score0.00213EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/05 12:00 a.m.40 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. The vulnerability affects the ISPConfig system-status UI, specifically the monitor/show_sys_state.php endpoint (state=server&server=[removed]...), allowing reflected user-supplied input to execute script in...

4.7CVSS5.8AI score0.00213EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 12:00 a.m.7 views

CVE-2025-52206

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...

4.7CVSS5.8AI score0.00213EPSS
SaveExploits1References3
Rows per page
Query Builder