CVE-2023-46818
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.
- Affected products
- Ispconfig
- Ispconfig
- < 3.2.11
- CVSS 3.1
- 7.2 HIGH
- EPSS
- 13.9% (96th percentile)
- Weakness
- CWE-94
- NVD status
- Modified
- Published
- 2023-10-27
CVE-2023-46818 at NVD
14 known exploits for CVE-2023-46818
Proof-of-concept code and exploit modules indexed by Sploitus
Exploit for Code Injection in Ispconfig
Exploit for Code Injection in Ispconfig
ISPConfig language_edit.php PHP Code Injection
📄 ISPConfig language_edit.php PHP Code Injection
Exploit for Code Injection in Ispconfig
Exploit for Code Injection in Ispconfig
Exploit for Code Injection in Ispconfig
Exploit for Code Injection in Ispconfig
Exploit for Unrestricted Upload of File with Dangerous Type in Backdropcms Backdrop_Cms
Exploit for Code Injection in Ispconfig
Exploit for Code Injection in Ispconfig
Exploit for Code Injection in Ispconfig
ISPConfig 3.2.11 PHP Code Injection Exploit
ISPConfig 3.2.11 PHP Code Injection