CVE-2008-4181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot or absolute pathname in the...

Path traversal

Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via 1 the userlanguage parameter to includes/loadlanguage.php or 2 the fantasticopath parameter to includes/mysqlconfig.php and...

CVE-2007-1455: Undefined Security Weakness

Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via 1 the userlanguage parameter to includes/loadlanguage.php or 2 the fantasticopath parameter to includes/mysqlconfig.php and...