CVE-2007-1455 Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage paramet...
HighCVSS 9.0
EPSS 6.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage parameter to includes/load_language.php or (2) the fantasticopath parameter to includes/mysqlconfig.php and certain other files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cpanel-host fantastico de luxe | All versions | No fix listed |
References
- 35036 vdb-entry
- 35037 vdb-entry
- 2420 third-party-advisory
- 20070311 Fantastico In all Version Cpanel 10.x <= local File Include mailing-list