Skip to content
OpenAdvisories

Vendor

ispconfig

3 known vulnerabilities.

Products

ISPConfig 2 ispconfig3 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-61518

    ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter

    ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The bui…

    ispconfig ispconfig3