HTTP: ISPConfig user_settings.php Arbitrary File Inclusion

This signature detects attempts to exploit an arbitrary file inclusion vulnerability which has been reported in ISPConfig. A remote attacker can exploit this vulnerability by sending a crafted request. Successful exploitation results in RCE under the security context of the target application.

Extended Description

An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.

Affected Products

Ispconfig ispconfig

References

CVE: CVE-2018-17984

URL: https://www.ispconfig.org/blog/ispconfig-3-1-13-released-important-security-bugfix/

Short Name

HTTP:ISPCONFIG-SETTINGS-FI

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: ISPConfig user_settings.php Arbitrary File Inclusion

Extended Description

Affected Products

References

Found a potential security threat?