Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated users with monitor permissions to execute arbitrary SQL commands via the server parameter. NOTE: this can be leveraged by remote attackers using CVE-2015-4119.2.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISPConfig SQL注入漏洞
Vulnerability Description
ISPConfig是一套基于Linux的开源主机控制面板，它可通过Web控制面板管理多台服务器、开设网站、监控服务器运行状况等。 ISPConfig 3.0.5.4p7之前版本的monitor/show_sys_state.php脚本中存在SQL注入漏洞。远程攻击者可借助‘server’参数利用该漏洞以‘monitor’权限执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A