CVE-2007-0854: Code Injection
Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code via a URL in the obj parameter. NOTE: a third party claims that this issue is not file inclusion because the contents are not parsed, but the attack can be used to overwrite files in /var/cpanel/objcache or provide unexpected web page contents.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0854?
The severity of CVE-2007-0854 is considered medium, as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2007-0854?
To fix CVE-2007-0854, ensure you are running the latest version of cPanel WebHost Manager with security patches applied.
What versions of cPanel WebHost Manager are affected by CVE-2007-0854?
CVE-2007-0854 affects multiple versions of cPanel WebHost Manager, particularly those prior to the security update that resolves this vulnerability.
Can CVE-2007-0854 be exploited remotely?
Yes, CVE-2007-0854 can be exploited remotely through crafted URLs in the affected parameter.
What are the potential impacts of exploiting CVE-2007-0854?
Exploiting CVE-2007-0854 can lead to arbitrary code execution, allowing attackers to compromise the affected server.