EIP-2026-107972

This exploit leverages a path traversal vulnerability in ISPConfig's language file inclusion mechanism to achieve remote command execution. It creates an FTP account, uploads a malicious .lng file, and triggers inclusion via a crafted language parameter.