CVE-2008-6926
23Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 4.0%
probabilidade de exploração
4.0%top 10% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/6897⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://exchange.xforce.ibmcloud.com/vulnerabilities/46252https://www.exploit-db.com/exploits/6897http://www.netenberg.com/forum/index.php?topic=6832http://www.securityfocus.com/archive/1/497964/100/0/threadedhttp://www.securityfocus.com/archive/1/498519http://www.securityfocus.com/archive/1/498526http://www.securityfocus.com/archive/1/498529http://www.securityfocus.com/archive/1/498529/100/0/threadedhttp://www.securityfocus.com/bid/32016