Situation
An authenticated cPanel account holder who is able to add parked or addon domains can create arbitrary files on the server.
Affected Product Versions
| Product | Affected Versions | Patched Versions |
|---|---|---|
| cPanel/WHM | All supported versions |
|
Impact
Successful exploitation leads to code execution as the root user, giving an attacker full control of the server and every account, website, and database on it.
Call to action
Update to the latest patched version: How do I update cPanel/WHM?
Comments
0 comments
Article is closed for comments.