CVE-2007-1455

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-14 · updated 2026-06-16

Description

Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage parameter to includes/load_language.php or (2) the fantasticopath parameter to includes/mysqlconfig.php and certain other files.

Affected products

Cpanel-Host Fantastico De Luxe: all versions

References

http://osvdb.org/35036
http://osvdb.org/35037
http://securityreason.com/securityalert/2420
http://www.securityfocus.com/archive/1/462562/100/0/threaded
http://osvdb.org/35036
http://osvdb.org/35037
http://securityreason.com/securityalert/2420
http://www.securityfocus.com/archive/1/462562/100/0/threaded

Get alerted when CVE-2007-1455 or the next vulnerability affects your stack