High severity7.8NVD Advisory· Published Oct 4, 2018· Updated Jun 17, 2026
CVE-2018-17984
CVE-2018-17984
Description
An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- 0x09al.github.io/security/ispconfig/exploit/vulnerability/2018/08/20/bug-or-backdoor-ispconfig-rce.htmlnvdExploitThird Party Advisory
- github.com/0x09AL/0x09al.github.io/blob/master/_posts/2018-08-20-bug-or-backdoor-ispconfig-rce.markdownnvdExploitThird Party Advisory
- www.ispconfig.org/blog/ispconfig-3-1-13-released-important-security-bugfix/nvdVendor Advisory
News mentions
0No linked articles in our index yet.