Hello! Sorry for the bad English, I use a translator. The question is. When you add a user panel, using SOAP, we get this error: Code: Fatal error: Uncaught SoapFault exception: [permission_denied] You do not have the permissions to access this function. SoapClient-> __call ('domains_domain_ ...', Array) SoapClient-> domains_domain_add ('f4aaaae1d9e0cf1 ...', 57, Array) ISPConfig Version: 3.0.4.1 Permission from the remote user full. By the way, under certain conditions can get a complete list of the contents of all directories web server using a simple script. It does not publish on objective reasons.
Please send us the infos about the vulnerability to dev @ ispconfig dot org. Please be aware that it depends in your php and site settings if you can see other folders, so its most likely a config issue. Regarding the soap function hat you use, it is not anabled or our oap user, so you cant access it.
