CVE-2008-6926
23Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 4.0%
probabilidad de explotación
4.0%top 10% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6897⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://exchange.xforce.ibmcloud.com/vulnerabilities/46252https://www.exploit-db.com/exploits/6897http://www.netenberg.com/forum/index.php?topic=6832http://www.securityfocus.com/archive/1/497964/100/0/threadedhttp://www.securityfocus.com/archive/1/498519http://www.securityfocus.com/archive/1/498526http://www.securityfocus.com/archive/1/498529http://www.securityfocus.com/archive/1/498529/100/0/threadedhttp://www.securityfocus.com/bid/32016