Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1422.
AI-analyzed exploit summary This is a technical writeup detailing multiple vulnerabilities in WHM.AutoPilot, including XSS, file inclusion, and information disclosure. It provides specific examples of exploit paths and root causes, such as improper handling of PHP_SELF and unprotected phpinfo() access.
Description
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings.
Exploits (1)
This is a technical writeup detailing multiple vulnerabilities in WHM.AutoPilot, including XSS, file inclusion, and information disclosure. It provides specific examples of exploit paths and root causes, such as improper handling of PHP_SELF and unprotected phpinfo() access.