CVE-2017-18435: Malicious File Upload
Published Aug 2, 2019
·Updated
cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).
Affected Software
5 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Cpanel Cpanel>=63.9999.74<64.0.21
Event History
Aug 2, 2019
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18435?
The severity of CVE-2017-18435 is considered to be high due to the potential for unauthorized code execution.
2
How do I fix CVE-2017-18435?
To fix CVE-2017-18435, upgrade to cPanel version 64.0.21 or later.
3
What software is affected by CVE-2017-18435?
CVE-2017-18435 affects various versions of cPanel prior to 64.0.21.
4
Can demo accounts exploit CVE-2017-18435?
Yes, demo accounts can exploit CVE-2017-18435 through the BoxTrapper API.
5
What are the potential impacts of CVE-2017-18435?
The potential impacts of CVE-2017-18435 include unauthorized code execution, which can compromise server integrity.