CVE-2008-6926 - CVE House
Back to Database
Status published Medium CVE-2008-6926

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe...

Vulnerability Description

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6926

Credits & Attribution

No credits recorded in the NVD database.

References

More from netenberg

View All →
CVE-2008-6843
Directory traversal vulnerability in index.php in Fantastico, as used with...
Medium 5
CVE-2008-4181
Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De...
Medium 6.8
CVE-2006-1119
fantastico in Cpanel does not properly handle when it has...
Medium 4
CVE-2004-2398
Netenberg Fantastico De Luxe 2.8 uses database file names that...
Low 2.1

Affected Vendor

Affected Software

fantastico de luxe
Vulnerable Versions:
Unknown

Timeline

Official Publish: August 10th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.