CVE-2007-0849

scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which allows local users to gain privileges by placing shell metacharacters in a directory name, and then using the control panel to protect this directory, a different vulnerability tha...

CVE-2007-0849

SysCP 1.2.15 and earlier is affected by CVE-2007-0849: a local privilege escalation caused by improper quoting of pathnames in user home directories. An attacker can place shell metacharacters in a directory name and then use the control panel to protect that directory to gain privileges. This is...