medium5.0Public exploit code
CVE-2008-7142
Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary di…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- cPanel 11.18.3 - List Directories and Folders Information Disclosure2008-03-18 · webapps · php · Verified
Impact
Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | Version 11.18.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/51582
- http://www.securityfocus.com/archive/1/489747/100/0/threaded
- http://www.securityfocus.com/bid/28300
- http://www.securityfocus.com/bid/28300/exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41266
- http://osvdb.org/51582
- http://www.securityfocus.com/archive/1/489747/100/0/threaded
- http://www.securityfocus.com/bid/28300
- http://www.securityfocus.com/bid/28300/exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41266