| Package | Affected versions | Patched versions |
|---|---|---|
| ispconfig | < 3.1.13 | 3.1.13 |
An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free