Blog
A security vulnerability has been found in ISPConfig which might allow a client to execute code under the permissions of the ispconfig user. The following two requirements must be met for this: - The attacker must have …
The ISPConfig Billing Module 2.0.5 has been released. This release contains a security bugfix for the SEPA Debit payment system. We highly recommend that you update your Billing Module installation when you are using …
The ISPConfig Billing Module 2.0.4 has been released. This update contains some minor enhancements and bugfixes for the ISPConfig Billing Module. Changelog New VAT info on dashboard (can be switched on in company …
This ISPConfig Release adds support for Ubuntu 18.04 LTS, new log configuration and management functions have been added to comply with GDPR in Europe and several bugs have been fixed. For details, please see the …
In the past weeks, we reviewed the ISPConfig sourcecode for further XSS issues and ISPConfig was tested with professional security test tools. Thank you very much to Fábián Patrik for his efforts in testing ISPConfig. …
The ISPConfig Billing Module 2.0.3 has been released. This update contains some minor enhancements and bugfixes for the ISPConfig Billing Module. Changelog New commission field in recurring items. Add support for …
Today, we are proud to announce the release of the ISPConfig Migration Toolkit 2.0. This Toolkit is the successor of the ISPConfig Migration Tool. The Migration Toolkit consists of 2 tools now, the ISPConfig Migration …
This update fixes several XSS vulnerabilities that were found in ISPConfig. A valid ISPConfig login is required to exploit the XSS vulnerabilities. The release includes other bugfixes and some minor improvements as …
This release contains an important security fix for an authenticated local root vulnerability in the ISPConfig website cron system, the vulnerability has the CVE number CVE-2017-17384 assigned and has been reported to …
This release adds support for Ubuntu 17.10 and fixes several bugs. ISPConfig supports PHP 7.1 as main PHP version now. ISPConfig 3.1.8p1 (Released on Nov. 10) This is a bugfix release for an issue found in the updater …
This release fixes 2 issues that were found in ISPConfig 3.1.7. The ISPConfig installer and updater did not recognize CentOS 6 correctly which resulted in problems with the amavisd configuration and there was a problem …
This release adds a new search path for the latest Let's Encrypt certbot program and fixes some minor bugs. The software can be downloaded here: http://www.ispconfig.org/downloads/ISPConfig-3.1.7.tar.gz …
This release adds remote API functions to set values in the global and system configuration and fixes some minor bugs. The software can be downloaded here: http://www.ispconfig.org/downloads/ISPConfig-3.1.6.tar.gz …
This release contains an important security fix. A user that is logged into ISPConfig was able to view contact details of other users due to an insufficient privilege check. Some minor bugs have been fixed in this …
This release adds support for Debian 9 (Stretch) and fixes some minor bugs. The software can be downloaded here: http://www.ispconfig.org/downloads/ISPConfig-3.1.4.tar.gz …
