{"uuid": "220d1c63-deeb-4785-93a8-6639d28f2d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3629", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ispconfig_php_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Brandon Perry \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"ISPConfig allows an authenticated administrator to export language settings into a PHP script\\n          which is intended to be reuploaded later to restore language settings. This feature\\n          can be abused to run aribitrary PHP code remotely on the ISPConfig server.\\n\\n          This module was tested against version 3.0.5.2.\", \"disclosure_date\": \"2013-10-30\", \"fullname\": \"exploit/multi/http/ispconfig_php_exec\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"ISPConfig Authenticated Arbitrary PHP Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/ispconfig_php_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/ispconfig_php_exec\", \"references\": [\"CVE-2013-3629\", \"URL-https://www.rapid7.com/blog/post/2013/10/30/seven-tricks-and-treats\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.599689Z"}