NetSight
medium6.3

CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337).

Impact

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.35
from 63.9999.74 before 64.0.42
from 65.9999.38 before 66.0.34
from 67.9999.64 before 68.0.15

Weakness classification

References