CVE-2004-1770

The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2004-03-11

Last modified

2024-08-08

Affected products

• Cpanel (Cpanel)

References

• http://marc.info/?l=bugtraq&m=107911581732035&w=2
• http://secunia.com/advisories/11124
• http://www.kb.cert.org/vuls/id/831534
• http://www.securityfocus.com/bid/9855
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15486