Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2008-4181

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) or absolute pathname in the fantasticopath parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

  • Published: Sep 23, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-4181
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
netenberg / fantastico_de_luxe 2.10.0-r13 2.10.0-r13.x
netenberg / fantastico_de_luxe 2.8.4-r3 2.8.4-r3.x
netenberg / fantastico_de_luxe 2.8.r18 2.8.r18.x
netenberg / fantastico_de_luxe 2.10.0-r9 2.10.0-r9.x
netenberg / fantastico_de_luxe 2.10.4-r6 2.10.4-r6.x
netenberg / fantastico_de_luxe 2.8.6-r3 2.8.6-r3.x
netenberg / fantastico_de_luxe - 2.10.0.x
netenberg / fantastico_de_luxe 2.8.4-r7 2.8.4-r7.x
netenberg / fantastico_de_luxe 2.10.0-r15 2.10.0-r15.x
netenberg / fantastico_de_luxe 2.8.8-r8 2.8.8-r8.x
netenberg / fantastico_de_luxe 2.10.2-r16 2.10.2-r16.x
netenberg / fantastico_de_luxe 2.8.2-r6 2.8.2-r6.x
netenberg / fantastico_de_luxe 2.10.2-r22 2.10.2-r22.x
netenberg / fantastico_de_luxe 2.10.4-r15 2.10.4-r15.x
netenberg / fantastico_de_luxe 2.8.8-r10 2.8.8-r10.x
netenberg / fantastico_de_luxe 2.8.r2 2.8.r2.x
netenberg / fantastico_de_luxe 2.8.8-r2 2.8.8-r2.x
netenberg / fantastico_de_luxe 2.10.2-r43 2.10.2-r43.x
netenberg / fantastico_de_luxe 2.10.2-r26 2.10.2-r26.x
netenberg / fantastico_de_luxe 2.10.2-r24 2.10.2-r24.x
netenberg / fantastico_de_luxe 2.8.8-r4 2.8.8-r4.x
netenberg / fantastico_de_luxe 2.8.2-r7 2.8.2-r7.x
netenberg / fantastico_de_luxe 2.8.r15 2.8.r15.x
netenberg / fantastico_de_luxe 2.8.r4 2.8.r4.x
netenberg / fantastico_de_luxe 2.10.4-r16 2.10.4-r16.x
netenberg / fantastico_de_luxe 2.8.2-r8 2.8.2-r8.x
netenberg / fantastico_de_luxe 2.10.2-r28 2.10.2-r28.x
netenberg / fantastico_de_luxe - 2.10.4.x
netenberg / fantastico_de_luxe 2.10.2-r13 2.10.2-r13.x
netenberg / fantastico_de_luxe 2.8.2-r1 2.8.2-r1.x
netenberg / fantastico_de_luxe 2.10.0-r11 2.10.0-r11.x
netenberg / fantastico_de_luxe 2.10.4-r17 2.10.4-r17.x
netenberg / fantastico_de_luxe 2.8.4-r1 2.8.4-r1.x
netenberg / fantastico_de_luxe 2.8.6-r2 2.8.6-r2.x
netenberg / fantastico_de_luxe 2.10.2-r37 2.10.2-r37.x
netenberg / fantastico_de_luxe - 2.10.2.x
netenberg / fantastico_de_luxe 2.10.4-r5 2.10.4-r5.x
netenberg / fantastico_de_luxe 2.10.4-r4 2.10.4-r4.x
netenberg / fantastico_de_luxe 2.8.r13 2.8.r13.x
netenberg / fantastico_de_luxe 2.8.2-r4 2.8.2-r4.x
netenberg / fantastico_de_luxe 2.10.4-r14 2.10.4-r14.x
netenberg / fantastico_de_luxe 2.10.4-r3 2.10.4-r3.x
netenberg / fantastico_de_luxe 2.10.2-r21 2.10.2-r21.x
netenberg / fantastico_de_luxe 2.10.2-r11 2.10.2-r11.x
netenberg / fantastico_de_luxe 2.10.2-r45 2.10.2-r45.x
netenberg / fantastico_de_luxe 2.10.0-r14 2.10.0-r14.x
netenberg / fantastico_de_luxe 2.8.r6 2.8.r6.x
netenberg / fantastico_de_luxe 2.8.4-r5 2.8.4-r5.x
netenberg / fantastico_de_luxe 2.10.2-r4 2.10.2-r4.x
netenberg / fantastico_de_luxe 2.8.2-r9 2.8.2-r9.x
netenberg / fantastico_de_luxe 2.10.2-r10 2.10.2-r10.x
netenberg / fantastico_de_luxe 2.10.2-r35 2.10.2-r35.x
netenberg / fantastico_de_luxe 2.10.0-r1 2.10.0-r1.x
netenberg / fantastico_de_luxe 2.10.2-r9 2.10.2-r9.x
netenberg / fantastico_de_luxe 2.10.2-r34 2.10.2-r34.x
netenberg / fantastico_de_luxe 2.10.2-r7 2.10.2-r7.x
netenberg / fantastico_de_luxe 2.10.0-r12 2.10.0-r12.x
netenberg / fantastico_de_luxe 2.10.2-r44 2.10.2-r44.x
netenberg / fantastico_de_luxe 2.10.0-r10 2.10.0-r10.x
netenberg / fantastico_de_luxe 2.10.2-r1 2.10.2-r1.x
netenberg / fantastico_de_luxe 2.10.4-r2 2.10.4-r2.x
netenberg / fantastico_de_luxe 2.10.2-r38 2.10.2-r38.x
netenberg / fantastico_de_luxe 2.8.r8 2.8.r8.x
netenberg / fantastico_de_luxe 2.8.r16 2.8.r16.x
netenberg / fantastico_de_luxe 2.8.r10 2.8.r10.x
netenberg / fantastico_de_luxe 2.10.0-r3 2.10.0-r3.x
netenberg / fantastico_de_luxe 2.10.0-r5 2.10.0-r5.x
netenberg / fantastico_de_luxe 2.10.2-r8 2.10.2-r8.x
netenberg / fantastico_de_luxe 2.10.0-r6 2.10.0-r6.x
netenberg / fantastico_de_luxe - 2.8.2.x
netenberg / fantastico_de_luxe 2.8.4-r2 2.8.4-r2.x
netenberg / fantastico_de_luxe 2.8.r12 2.8.r12.x
netenberg / fantastico_de_luxe 2.10.2-r19 2.10.2-r19.x
netenberg / fantastico_de_luxe 2.10.2-r5 2.10.2-r5.x
netenberg / fantastico_de_luxe 2.10.2-r32 2.10.2-r32.x
netenberg / fantastico_de_luxe 2.10.2-r29 2.10.2-r29.x
netenberg / fantastico_de_luxe 2.8.r5 2.8.r5.x
netenberg / fantastico_de_luxe 2.10.2-r39 2.10.2-r39.x
netenberg / fantastico_de_luxe 2.8.r19 2.8.r19.x
netenberg / fantastico_de_luxe 2.10.2-r18 2.10.2-r18.x
netenberg / fantastico_de_luxe 2.10.2-r42 2.10.2-r42.x
netenberg / fantastico_de_luxe 2.8.8-r3 2.8.8-r3.x
netenberg / fantastico_de_luxe 2.8.r17 2.8.r17.x
netenberg / fantastico_de_luxe 2.8.8-r1 2.8.8-r1.x
netenberg / fantastico_de_luxe 2.10.0-r7 2.10.0-r7.x
netenberg / fantastico_de_luxe 2.10.2-r23 2.10.2-r23.x
netenberg / fantastico_de_luxe 2.8.r11 2.8.r11.x
netenberg / fantastico_de_luxe 2.8.8-r5 2.8.8-r5.x
netenberg / fantastico_de_luxe 2.8.4-r6 2.8.4-r6.x
netenberg / fantastico_de_luxe 2.8.2-r5 2.8.2-r5.x
netenberg / fantastico_de_luxe 2.10.2-r27 2.10.2-r27.x
netenberg / fantastico_de_luxe 2.10.4-r9 2.10.4-r9.x
netenberg / fantastico_de_luxe 2.8.6-r1 2.8.6-r1.x
netenberg / fantastico_de_luxe 2.8.r3 2.8.r3.x
netenberg / fantastico_de_luxe 2.10.0-r2 2.10.0-r2.x
netenberg / fantastico_de_luxe 2.10.4-r12 2.10.4-r12.x
netenberg / fantastico_de_luxe 2.8.r7 2.8.r7.x
netenberg / fantastico_de_luxe 2.10.4-r7 2.10.4-r7.x
netenberg / fantastico_de_luxe 2.10.2-r25 2.10.2-r25.x
netenberg / fantastico_de_luxe 2.10.2-r31 2.10.2-r31.x
netenberg / fantastico_de_luxe 2.8.r14 2.8.r14.x
netenberg / fantastico_de_luxe 2.8.r9 2.8.r9.x
netenberg / fantastico_de_luxe 2.8.2-r11 2.8.2-r11.x
netenberg / fantastico_de_luxe 2.8.2-r10 2.8.2-r10.x
netenberg / fantastico_de_luxe 2.8.r1 2.8.r1.x
netenberg / fantastico_de_luxe 2.10.0-r16 2.10.0-r16.x
netenberg / fantastico_de_luxe 2.10.4-r1 2.10.4-r1.x
netenberg / fantastico_de_luxe 2.10.2-r12 2.10.2-r12.x
netenberg / fantastico_de_luxe 2.10.0-r4 2.10.0-r4.x
netenberg / fantastico_de_luxe 2.10.4-r10 2.10.4-r10.x
netenberg / fantastico_de_luxe 2.10.2-r41 2.10.2-r41.x
netenberg / fantastico_de_luxe 2.10.2-r3 2.10.2-r3.x
netenberg / fantastico_de_luxe 2.10.2-r6 2.10.2-r6.x
netenberg / fantastico_de_luxe 2.10.2-r2 2.10.2-r2.x
netenberg / fantastico_de_luxe 2.10.4-r8 2.10.4-r8.x
netenberg / fantastico_de_luxe 2.8.2-r2 2.8.2-r2.x
netenberg / fantastico_de_luxe 2.10.2-r33 2.10.2-r33.x
netenberg / fantastico_de_luxe 2.10.2-r17 2.10.2-r17.x
netenberg / fantastico_de_luxe 2.8.8-r7 2.8.8-r7.x
netenberg / fantastico_de_luxe 2.8.2-r3 2.8.2-r3.x
netenberg / fantastico_de_luxe 2.10.2-r36 2.10.2-r36.x
netenberg / fantastico_de_luxe 2.10.4-r11 2.10.4-r11.x
netenberg / fantastico_de_luxe - 2.8.8.x
netenberg / fantastico_de_luxe 2.10.2-r30 2.10.2-r30.x
netenberg / fantastico_de_luxe 2.10.2-r40 2.10.2-r40.x
netenberg / fantastico_de_luxe 2.8.4-r4 2.8.4-r4.x
netenberg / fantastico_de_luxe 2.8.8-r6 2.8.8-r6.x
netenberg / fantastico_de_luxe 2.10.4-r13 2.10.4-r13.x
netenberg / fantastico_de_luxe 2.8.8-r9 2.8.8-r9.x
netenberg / fantastico_de_luxe 2.10.2-r14 2.10.2-r14.x
netenberg / fantastico_de_luxe 2.10.2-r20 2.10.2-r20.x
netenberg / fantastico_de_luxe 2.10.2-r15 2.10.2-r15.x