VulnerabilityModified
CVE-2004-1769
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
HIGH 10.0EPSS 34.8%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 34.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 34.83% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- cpanel/cpanel
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=107904890724201&w=2
- http://secunia.com/advisories/11111Vendor Advisory
- http://www.kb.cert.org/vuls/id/831534Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0Vendor Advisory
- http://www.securityfocus.com/bid/9848Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15443
- http://marc.info/?l=bugtraq&m=107904890724201&w=2
- http://secunia.com/advisories/11111Vendor Advisory
- http://www.kb.cert.org/vuls/id/831534Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0Vendor Advisory
- http://www.securityfocus.com/bid/9848Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15443
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.