ISPConfig 漏洞列表

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

ISPConfig Admin Default Password Vulnerability exposes systems to unauthorized access, compromising data integrity and security.

ISPConfig Hosting Control Panel Default Password Vulnerability exposes systems to unauthorized access, compromising data integrity and security.

【漏洞对象】ISPConfig 【漏洞描述】ISPConfig是Linux的一款开源的虚拟主机管理程序，带Web控制面板，可通过Web控制面板管理虚拟主机、开设网站、开设邮箱、开设和管理mysql数据库、支持DNS解析和监控服务器运行状况等功能。攻击者可利用默认密码登录ISPConfig面板可查看整个邮箱服务器以及网站服务器，泄露用户个人信息。