Vulnerabilities (CVE)

Filtered by vendor Cpanel-host Subscribe
Filtered by product Fantastico De Luxe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-1455 1 Cpanel-host 1 Fantastico De Luxe 2024-02-28 9.0 HIGH N/A
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage parameter to includes/load_language.php or (2) the fantasticopath parameter to includes/mysqlconfig.php and certain other files.