← All advisories

Critical severity9.8NVD Advisory· Published Feb 25, 2020· Updated Jun 17, 2026

CVE-2020-9398

CVE-2020-9398

Description

ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Ispconfig/Ispconfig5 versions
cpe:2.3:a:ispconfig:ispconfig:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ispconfig:ispconfig:*:*:*:*:*:*:*:*range: <3.1.15
- cpe:2.3:a:ispconfig:ispconfig:3.1.15:-:*:*:*:*:*:*
- cpe:2.3:a:ispconfig:ispconfig:3.1.15:p1:*:*:*:*:*:*
- cpe:2.3:a:ispconfig:ispconfig:3.1.15:p2:*:*:*:*:*:*
- (no CPE)range: <3.1.15p3
ISPConfig/ISPConfigdescription

Patches

Vulnerability mechanics

References

1

www.ispconfig.org/blog/ispconfig-3-1-15p3-released-security-bugfix-release/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.