2020-02-25 20:23:55
mitre
PUBLISHED
ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.