ISPConfig versions 4.2.11 and below suffer from a PHP code injection vulnerability in language_edit.php. Continue reading...