CVE-2013-3629

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• ISPConfig - (Authenticated) Arbitrary PHP Code Execution (Metasploit)2013-10-31 · remote · php · Verified

Impact

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution

Affected products

References

• NVD record
• CVE.org record
• http://www.exploit-db.com/exploits/29322
• http://www.securityfocus.com/bid/63455
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
• http://www.exploit-db.com/exploits/29322
• http://www.securityfocus.com/bid/63455
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats