1 writeup tagged with Config Disclosure
ISP file manager path traversal leaks app config with credentials. ISPConfig adduser API abuse leads to root.