VULNERABILITY INTELLIGENCE
CVE-2007-1455
CVSS score9 HIGH
EPSS probability6.93%
CISA KEVNot currently listed
Published2007-03-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage parameter to includes/load_language.php or (2) the fantasticopath parameter to includes/mysqlconfig.php and certain other files.