Lucene search
HistoryMar 11, 2004 - 5:00 a.m.
CVE-2004-1770
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.13 Low
EPSS
Percentile
95.6%
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.
Affected configurations
Node
cpanelcpanelMatch5.0
ORcpanelcpanelMatch5.3
ORcpanelcpanelMatch6.0
ORcpanelcpanelMatch6.2
ORcpanelcpanelMatch6.4
ORcpanelcpanelMatch6.4.1
ORcpanelcpanelMatch6.4.2
ORcpanelcpanelMatch6.4.2_stable_48
ORcpanelcpanelMatch7.0
ORcpanelcpanelMatch8.0
ORcpanelcpanelMatch9.0
ORcpanelcpanelMatch9.1
Related
cvelist
cvelist
CVE-2004-1770
2005-03-10 05:00:00
cve
cve
CVE-2004-1770
2005-03-10 05:00:00
nessus
nessus
cPanel <= 9.1.0 Multiple Vulnerabilities
2004-03-14 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.13 Low
EPSS
Percentile
95.6%
Related for NVD:CVE-2004-1770