CVE-2008-2043

cPanel - Cross-Site Request Forgery via Multiple Frontend Endpoints

Title source: llm

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to (1) execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via (2) frontend/x2/sql/adddb.html, (3) frontend/x2/sql/adduser.html, and (4) frontend/x2/ftp/doaddftp.html.

References (5)

Core 5

Core References

Exploit x_refsource_misc

http://www.rooksecurity.com/blog/?p=7

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/584089

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/42114

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30027

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1401/references

Scores

EPSS 0.0047

EPSS Percentile 64.7%

Details

CWE

CWE-352

Status published

Products (2)

cpanel/cpanel 11.18.3

cpanel/cpanel 11.19.3

Published May 01, 2008

Tracked Since Feb 18, 2026