The one place for your designs
To enable design management, you'll need to meet the requirements. If you need help, reach out to our support team for assistance.
Insufficient escaping of whitespace in FTP user paths
Under "Web pages" => "Web access" => "FTP user" => Edit or create new => "Options" => "Directory
If you store e.g. /var/www/clients/client23/web167/ /root/TEST the folder TEST with the user rights of the FTP account will be created in /root/. What is even worse is that the permissions of existing folders are overwritten.
Scope: A valid client login with active website module and the permission to add FTP users in client limits is required to access the FTP user path setting.
Note: The original report has been translated to English by ISPConfig developers and the scope information has been added.