PT-2004-2337 · Cpanel · Whm Autopilot

James Bercegay

·

Published

2004-12-31

·

Updated

2017-07-11

·

CVE-2004-1422

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: WHM AutoPilot versions 2.4.6.5 and earlier
Description: The issue allows remote attackers to gain sensitive information. This is achieved via phpinfo, which reveals php settings.
Recommendations: For versions 2.4.6.5 and earlier, consider restricting access to phpinfo to minimize the risk of exploitation.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2004-1422

Affected Products

Whm Autopilot