CVE-2008-6843

Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. dot dot in the sup3r parameter...

CVE-2008-6843

CVE-2008-6843 is a directory traversal vulnerability affecting Fantastico (used with cPanel 11.x). The issue allows remote attackers to read arbitrary files by supplying a .. payload in the sup3r parameter of index.php.reported in multiple sources (NVD, CVE records). The available connected docum...

CVE-2008-6843: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. dot dot in the sup3r parameter...

CVE-2009-2275

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...

Directory traversal

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...

CVE-2009-2275

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...

CVE-2009-2275

CVE-2009-2275 is a directory traversal vulnerability affecting cPanel, specifically in frontend/x3/stats/lastvisit.html. The issue allows remote attackers to read arbitrary files by injecting .. into the domain parameter. According to the provided sources, the exposure is tied to a path traversal...

CVE-2009-2275: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...

Cpanel (lastvisit.html domain) Arbitrary File Disclosure Vuln (auth)

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

WHOISCART (Auth Bypass) Information Disclosure Vulnerability

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

WHOISCART Administrative Bypass

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ +===================================================================================+ |...

Cpanel (lastvisit.html domain) Arbitrary File Disclosure Vuln (auth)

Exploit for multiple platform in category remote exploits ==================================================================== Cpanel lastvisit.html domain Arbitrary File Disclosure Vuln auth ====================================================================...

Cpanel File Disclosure

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

cPanel - (Authenticated) 'lastvisit.html Domain' Arbitrary File Disclosure

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

cPanel - (Authenticated) lastvisit.html Domain Arbitrary File Disclosure

cPanel - Authenticated lastvisit.html Domain Arbitrary File Disclosure +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P...

WHOISCART - Authentication Bypass Information Disclosure

WHOISCART - Authentication Bypass Information Disclosure +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

WHOISCART (Auth Bypass) Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ WHOISCART Auth Bypass Information Disclosure Vulnerability ============================================================...

WHOISCART - Authentication Bypass / Information Disclosure

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ +===================================================================================+ |...

CVE-2009-2168

cpanel/login.php in EgyPlus 7ammel aka 7ml 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters...

CVE-2009-2167

Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel aka 7ml 1.0.1 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...