CVE-2004-1770

The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.

Affected products

Cpanel

Cpanel

= 5.0, 5.3, 6.0, 6.2, 6.4, 6.4.1, 6.4.2, 6.4.2_stable_48, 7.0, 8.0, 9.0, 9.1

Fix

Available

CVSS 2.0

10.0 HIGH

EPSS

10.2% (95th percentile)

NVD status

Modified

Published

2005-03-10