147 matches found
ISPConfig - PHP Code Injection
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...
CVE-2026-61518
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
CVE-2026-61518
ISPConfig contains an authenticated SQL injection vulnerability in its Remote API . The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not ...
EUVD-2026-62663
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
CVE-2026-61518 ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
PT-2026-78543
Name of the Vulnerable Software and Affected Versions ISPConfig affected versions not specified Description An authenticated SQL injection exists in the Remote API. The primary id parameter used in delete and update API methods is concatenated directly into SQL WHERE clauses without integer casti...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
EUVD-2025-209641
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. The vulnerability affects the ISPConfig system-status UI, specifically the monitor/show_sys_state.php endpoint (state=server&server=[removed]...), allowing reflected user-supplied input to execute script in...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-52206
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
PT-2026-37054
Name of the Vulnerable Software and Affected Versions ISPConfig version 3.3.0 Description Cross Site Scripting XSS is possible via the system status webpage. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
ISPConfig 跨站脚本漏洞
ISPConfig is a set of open-source host control panels based on Linux by the ISPConfig company. It allows for the management of multiple servers through a web-based control panel, the creation of websites, and the monitoring of server status. Version 3.3.0 of ISPConfig contains a cross-site...
EUVD-2015-4144
Malware in sbrugna...
EUVD-2012-2093
Malware in sbrugna...
EUVD-2020-30219
Malware in sbrugna...