Skip to content
Threat Feed
Subscribe

Vendor

ISPConfig

2 briefs RSS
high advisory

Public Exploit Released for ISPConfig PHP Code Injection (CVE-2023-46818)

A functional exploit for CVE-2023-46818 in ISPConfig allows authenticated high-privileged users to achieve Remote Code Execution via PHP code injection in language_edit.php.

ISPConfig
1r 2t 1c
high advisory

Authenticated SQL Injection in ISPConfig Remote API

An authenticated SQL injection vulnerability in the ISPConfig Remote API allows low-privilege users to execute arbitrary queries, leading to unauthorized data exfiltration and cross-tenant record manipulation.

ISPConfig
2t 1c