CVE-2004-1769
cPanel <= 9.1.0 build 34 - Remote Code Execution via Reset Password User Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1769. PoCs published by Arab VieruZ, sinkaroid, Redsplit.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in cPanel's password reset script due to insufficient input sanitization. An attacker can execute arbitrary commands by injecting shell metacharacters into the 'user' parameter of the URI.
Description
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
Exploits (3)
This exploit demonstrates a command injection vulnerability in cPanel's password reset script due to insufficient input sanitization. An attacker can execute arbitrary commands by injecting shell metacharacters into the 'user' parameter of the URI.
This repository contains a functional exploit for CVE-2004-1769, targeting cPanel's password reset feature. The bash script automates the process of sending crafted requests to reset passwords via email, while the PHP script facilitates the exploitation by writing to cPanel contact files.
This repository contains a functional exploit for CVE-2004-1769, targeting cPanel's password reset feature. The exploit uses a bash script to automate the process of resetting cPanel user passwords via a crafted request, leveraging the vulnerability in the 'user' parameter.