Critical Privilege Escalation and Remote Code Execution Vulnerability in ISPConfig 3.2.12p1
A critical vulnerability in ISPConfig version 3.2.12p1 enables authenticated attackers to escalate privileges to superadmin and execute arbitrary PHP code remotely. ISPConfig segregates users into clients, resellers, admins, and a unique superadmin.