7 matches found
EUVD-2012-2093
Malware in sbrugna...
Exploit for Code Injection in Ispconfig
---- CVE-2023-46818...
Exploit for Code Injection in Ispconfig
CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Ba...
CVE-2021-3021
ISPConfig before 3.2.2 allows SQL injection...
CVE-2020-9398
ISPConfig before 3.1.15p3, when the undocumented reverseproxypanelallowed=sites option is manually enabled, allows SQL Injection...
CVE-2012-2087
ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface...
PT-2023-30234 · Ispconfig · Ispconfig
Name of the Vulnerable Software and Affected Versions: ISPConfig versions prior to 3.2.11p1 Description: An issue was discovered that allows PHP code injection in the language file editor by an admin if admin allow langedit is enabled. This issue can be exploited to achieve PHP code injection...