Known Vulnerabilities for products from Ispconfig
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Ispconfig".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-52206 json | ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. | Not Provided | 2026-05-05 | 2026-05-12 |
| CVE-2024-53720 json | Not Provided | 2024-12-02 | 2026-04-23 | |
| CVE-2023-46818 json | An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an ad... | 7.2 - HIGH | 2023-10-27 | 2023-11-08 |
| CVE-2021-3021 json | ISPConfig before 3.2.2 allows SQL injection. | 9.8 - CRITICAL | 2021-01-05 | 2021-01-07 |
| CVE-2020-9398 json | ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Inj... | 9.8 - CRITICAL | 2020-02-25 | 2020-03-03 |
| CVE-2018-17984 json | An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading ... | 7.8 - HIGH | 2018-10-04 | 2018-12-13 |
| CVE-2017-17384 json | ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job. | Not Provided | 2017-12-07 | 2025-04-20 |
| CVE-2015-4119 json | Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the... | Not Provided | 2015-06-15 | 2026-05-06 |
| CVE-2015-4118 json | SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated users wit... | Not Provided | 2015-06-15 | 2026-05-06 |
| CVE-2013-3629 json | ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution | 8.8 - HIGH | 2020-02-07 | 2020-02-10 |
| CVE-2012-2087 json | ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface. | 9.8 - CRITICAL | 2020-01-23 | 2020-01-30 |
| CVE-2006-3042 json | ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbit... | 7.5 - HIGH | 2006-06-15 | 2023-11-07 |
| CVE-2006-2315 json | ** DISPUTED ** PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attac... | 7.5 - HIGH | 2006-05-12 | 2023-11-07 |
Known software with vulnerabilities from Ispconfig
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ispconfig | Ispconfig | 2.0.4 |