medium5.0Public exploit code
CVE-2004-1422
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities2014-12-27 · webapps · php
Impact
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Whm | Whm Autopilot | Versions 2.4.5, 2.4.6, 2.4.6.5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110425620105529&w=2
- http://marc.info/?l=bugtraq&m=110451997904494&w=2
- http://secunia.com/advisories/13673
- http://www.gulftech.org/?node=research&article_id=00059-12272004
- http://www.securityfocus.com/bid/12119
- http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18701
- http://marc.info/?l=bugtraq&m=110425620105529&w=2
- http://marc.info/?l=bugtraq&m=110451997904494&w=2
- http://secunia.com/advisories/13673
- http://www.gulftech.org/?node=research&article_id=00059-12272004
- http://www.securityfocus.com/bid/12119
- http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18701