Lucene search
HistoryMar 10, 2005 - 5:00 a.m.
CVE-2004-1770
cpanel
login page
remote attackers
arbitrary code
shell metacharacters
cve-2004-1770
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.13 Low
EPSS
Percentile
95.6%
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.
Affected configurations
Node
cpanelcpanelMatch5.0
ORcpanelcpanelMatch5.3
ORcpanelcpanelMatch6.0
ORcpanelcpanelMatch6.2
ORcpanelcpanelMatch6.4
ORcpanelcpanelMatch6.4.1
ORcpanelcpanelMatch6.4.2
ORcpanelcpanelMatch6.4.2_stable_48
ORcpanelcpanelMatch7.0
ORcpanelcpanelMatch8.0
ORcpanelcpanelMatch9.0
ORcpanelcpanelMatch9.1
Related
cvelist
cvelist
CVE-2004-1770
2005-03-10 05:00:00
nvd
nvd
CVE-2004-1770
2004-03-11 05:00:00
nessus
nessus
cPanel <= 9.1.0 Multiple Vulnerabilities
2004-03-14 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.13 Low
EPSS
Percentile
95.6%
Related for CVE-2004-1770