New ISPConfig Authenticated Remote Code Execution Vulnerability

ISPConfig contains design flaws in the user creation and editing functionality, which allow a client user to escalate their privileges to superadmin. Additionally, the language modification feature enables arbitrary PHP code injection due to improper input validation. submitted by /u/SSDisclosure [link] [comments]Technical Information Security Content & DiscussionRead More