CVE-2023-46818 PoC — ISPConfig 安全漏洞

Source

https://github.com/blindma1den/CVE-2023-46818-Exploit

Associated Vulnerability

Title: ISPConfig 安全漏洞 (CVE-2023-46818)
Description:An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Description

This is my own exploit for CVE-2023-46818 happy hacking!

Readme

# CVE-2023-46818-Exploit
This is my own exploit for CVE-2023-46818 happy hacking!

This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials, targets the vulnerable language_edit.php file, and abuses the records[\] form field to inject malicious PHP code. This payload writes a sh.php file on the server, which functions as a lightweight web shell. Once deployed, it launches an interactive shell where the user can type system commands, which the PHP script executes remotely and returns the output wrapped between ____ markers for easy parsing.

Please, feel free to send PR to improve if you considere it, happy hacking! 


@blindma1den

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →