## https://sploitus.com/exploit?id=96F0DA98-7362-55F9-8AD1-ADB94DD26EF5
# CVE-2023-46818
ISPConfig - PHP Code Injection PoC Exploit (Bash)
### Introduction
`ISPConfig` versions
### Usage
```bash
git clone https://github.com/engranaabubakar/CVE-2023-46818.git
cd CVE-2023-46818
chmod +x exploit.sh
./exploit.sh http://$IP admin admin
```
Note: This exploit requires valid ISPConfig admin credentials and will deploy a command web shell accessible at `/admin/sh.php`. It provides a terminal-like interface for continuous command execution on the target system.
### Credits
Researcher: Rana Abu Bakar
Original Advisory: https://karmainsecurity.com/KIS-2023-13