Lucene search
HistoryMar 11, 2004 - 5:00 a.m.
CVE-2004-1769
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.119 Low
EPSS
Percentile
95.4%
The “Allow cPanel users to reset their password via email” feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
Affected configurations
Node
cpanelcpanelMatch5.0
ORcpanelcpanelMatch5.3
ORcpanelcpanelMatch6.0
ORcpanelcpanelMatch6.2
ORcpanelcpanelMatch6.4
ORcpanelcpanelMatch6.4.1
ORcpanelcpanelMatch6.4.2
ORcpanelcpanelMatch6.4.2_stable_48
ORcpanelcpanelMatch7.0
ORcpanelcpanelMatch8.0
ORcpanelcpanelMatch9.0
ORcpanelcpanelMatch9.1
Related
cvelist
cvelist
CVE-2004-1769
2005-03-10 05:00:00
cve
cve
CVE-2004-1769
2005-03-10 05:00:00
nessus
nessus
cPanel <= 9.1.0 Multiple Vulnerabilities
2004-03-14 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.119 Low
EPSS
Percentile
95.4%
Related for NVD:CVE-2004-1769