CVE-2008-6926: Path Traversal
Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpathshow parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disablefunctions and safemode are active, since exploitation requires uploading of executable code to a home directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6926?
CVE-2008-6926 is considered a critical vulnerability due to its potential for remote file inclusion and execution.
How do I fix CVE-2008-6926?
To fix CVE-2008-6926, ensure that your Fantastico De Luxe installation is updated to the latest version that addresses this vulnerability.
What applications are affected by CVE-2008-6926?
CVE-2008-6926 affects the Fantastico De Luxe Module used in conjunction with cPanel.
Can CVE-2008-6926 be exploited remotely?
Yes, CVE-2008-6926 can be exploited remotely by attackers using crafted requests.
What are the potential impacts of CVE-2008-6926?
Exploitation of CVE-2008-6926 could allow attackers to include and execute arbitrary local files on the server, leading to potential data breaches or system compromise.