Browse CVEs

HIGH 7.2 CVE-2023-46818EPSS 14% An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_lange… Ispconfig 3.2.11+ Fix from $1,9502023-10-27 CRITICAL 9.8 CVE-2021-3021 ISPConfig before 3.2.2 allows SQL injection. Ispconfig 3.2.2+ Fix from $2,3002021-01-05 CRITICAL 9.8 CVE-2020-9398 ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection. Ispconfig 3.1.15+ Fix from $2,3002020-02-25 HIGH 8.8 CVE-2013-3629EPSS 43% ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution Ispconfig No fix yet Fix from $1,9502020-02-07 CRITICAL 9.8 CVE-2012-2087 ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface. Ispconfig No fix yet Fix from $2,3002020-01-23 HIGH 7.8 CVE-2018-17984 An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This … Ispconfig 3.1.13+ Fix from $1,9502018-10-04 HIGH 8.8 CVE-2017-17384 ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job. Ispconfig Patch available Fix from $1,9502017-12-07 MEDIUM 6.8 CVE-2015-4119 Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the authentication of (1) a… Ispconfig after 3.0.5.4 Fix from $1,6002015-06-15 MEDIUM 6.5 CVE-2015-4118 SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated users with monitor permissions to… Ispconfig after 3.0.5.4 Fix from $1,6002015-06-15 HIGH 7.5 CVE-2006-3042 Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) go_in… Ispconfig No fix yet Fix from $1,9502006-06-15 HIGH 7.5 CVE-2006-2315 PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a… Ispconfig after 2.2.2 Fix from $1,9502006-05-12