Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/engranaabubakar/cve-2023-46818
Payload GenerationVulnerability AnalysisCode AnalysisExploitationShellcodeWeb Application ExploitationPenetration Testing
GitHubengranaabubakar/cve-2023-46818

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

CVE-2023-46818

Proof-of-concept exploit for authenticated PHP code injection in ISPConfig <= 3.2.11, enabling remote code execution via unsanitized language file input. Deploys a command web shell for continuous access.

View Repository
71 year agoNot yet reviewed
Share

CVE-2023-46818

ISPConfig - PHP Code Injection PoC Exploit (Bash)

Introduction

ISPConfig versions <= 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records[] parameter in the /admin/language_edit.php endpoint. A malicious authenticated admin user can exploit this to inject arbitrary PHP code, leading to remote code execution. The vulnerability occurs due to unsanitized handling of language file input used in dynamically generated PHP code.


Usage

root@kitploit:~
git clone https://github.com/engranaabubakar/CVE-2023-46818.git
cd CVE-2023-46818
chmod +x exploit.sh

./exploit.sh http://$IP admin admin

Note: This exploit requires valid ISPConfig admin credentials and will deploy a command web shell accessible at `/admin/sh.php`. It provides a terminal-like interface for continuous command execution on the target system.


Credits

Researcher: Rana Abu Bakar
Original Advisory: https://karmainsecurity.com/KIS-2023-13

Download Tool