CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...

CVE-2023-46818

CVE-2023-46818 Python Exploit 🔥 Description This Python exploit script targets a security vulnerability in ISPConfig's records POST parameter to /admin/languageedit.php, which is not properly sanitized. This allows an authenticated admin to inject and execute arbitrary PHP code. ⚠️ Affected...

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-46818 happy hacking! This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials...

CVE-2023-46818-python-exploit

CVE-2023-46818 exploit This is a python version of the original php script for the vulnerability affecting ispconfig 3.2.11 and previous versions. Original PHP source: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html This proof-of-concept is intended for...

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash CVE-2023-46818 Authenticated PHP Code Injection in ISPConfig for more details: advisory CVE-2023-46818 PoC Introduction ISPConfig versions Note: This exploit requires valid ISPConfig admin credentials and will deploy a command web she...

CVE-2023-46818

CVE-2023-46818 - ISPConfig PHP Code Execution | Exploit High Remote Code Execution in ISPConfig PoC implementation. Resume ISPConfig versions /admin/languageedit.php — ISPConfig vulnerable endpoint 🚀 Launching the Exploit...