Sploitus

7 exploited vulnerabilities in Ispconfig

Vulnerabilities with publicly known exploits

Vendors
Ispconfig
With known exploits
7
Affected Ispconfig versions
< 3.1.13, 3.0.4.3, 2.2.3, 2.2.2, 3.0.5.4, 3.0.5.2

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2018-17984
CVSS 7.8 HIGH 2018-10-04FIX AVAILABLE
CVE-2012-2087
CVSS 7.5 HIGH 2020-01-23FIX AVAILABLE
CVE-2006-3042 1 exploit
CVSS 7.5 HIGH 2006-06-15
ISPConfig 2.2.3 - Multiple Remote File Inclusions
CVE-2006-2315 1 exploit
CVSS 7.5 HIGH 2006-05-12
ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion
CVE-2015-4119 5 exploits
CVSS 6.8 MEDIUM 2015-06-15FIX AVAILABLE
ISPConfig <= 3.0.5.4p7 monitor/show_sys_state.php SQL注入漏洞ISPConfig 3.0.5.4p6 SQL Injection / Cross Site Request Forgery Vulnerabilities
CVE-2013-3629 4 exploits
CVSS 6.5 MEDIUM 2020-02-07
ISPConfig Authenticated Arbitrary PHP Code Execution VulnerabilityISPConfig - (Authenticated) Arbitrary PHP Code Execution (Metasploit)
CVE-2015-4118 4 exploits
CVSS 6.5 MEDIUM 2015-06-15FIX AVAILABLE
ISPConfig 3.0.5.4p6 SQL Injection / Cross Site Request Forgery VulnerabilitiesISPConfig 3.0.5.4p6 - Multiple Vulnerabilities