CVE-2020-9398

ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.

Date published : 2020-02-25

ISPConfig 3.1.15p3 Released – Security Bugfix Release