9.3
CVSSv2

CVE-2020-9398

Published: 25/02/2020 Updated: 03/03/2020
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

ISPConfig prior to 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ispconfig ispconfig

ispconfig ispconfig 3.1.15