CVE-2004-1769

This exploit demonstrates a command injection vulnerability in cPanel's password reset script due to insufficient input sanitization. An attacker can execute arbitrary commands by injecting shell metacharacters into the 'user' parameter of the URI.

This repository contains a functional exploit for CVE-2004-1769, targeting cPanel's password reset feature. The bash script automates the process of sending crafted requests to reset passwords via email, while the PHP script facilitates the exploitation by writing to cPanel contact files.

This repository contains a functional exploit for CVE-2004-1769, targeting cPanel's password reset feature. The exploit uses a bash script to automate the process of resetting cPanel user passwords via a crafted request, leveraging the vulnerability in the 'user' parameter.