high7.2
CVE-2023-46818
An issue was discovered in ISPConfig before 3.2.11p1.
Impact
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ispconfig | Ispconfig | before 3.2.11 Version 3.2.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html
- http://seclists.org/fulldisclosure/2023/Dec/2
- https://www.ispconfig.org/blog/ispconfig-3-2-11p1-released/
- http://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html
- http://seclists.org/fulldisclosure/2023/Dec/2
- https://www.ispconfig.org/blog/ispconfig-3-2-11p1-released/