NVD

Id
53071  
Name
CVE-2007-0854  
Description
Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code via a URL in the obj parameter. NOTE: a third party claims that this issue is not file inclusion because the contents are not parsed, but the attack can be used to overwrite files in /var/cpanel/objcache or provide unexpected web page contents.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-08  
Modified Date
2011-08-10  
Seq
2007-0854  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268372 53071 CVE-2007-0854 http://changelog.cpanel.net/index.cgi  View
268373 53071 CVE-2007-0854 20070208 Re: remote file include in whm (all version)  View
268374 53071 CVE-2007-0854 20070207 remote file include in whm (all version)  View
268375 53071 CVE-2007-0854 22455  View
268376 53071 CVE-2007-0854 ADV-2007-0545  View
268377 53071 CVE-2007-0854 cpanel-webhost-objcache-xss(32400)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52866 JVNDB-2007-001558 cPanel WHM の scripts2/objcache におけるリモートファイルインクルージョンの脆弱性 cPanel WebHost Manager (WHM) の scripts2/objcache には、リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-0854 24209 CVE-2007-0854 53071 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001558.html 2007-02-08 2012-06-26 View