CVE-2004-1769

The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

34.83% chance of exploitation in the next 30 days, 98th percentile

Published

2005-03-10

Updated

2024-08-08

Proof-of-concept exploits (2)

• Redsplit/shiguresh1★ · 2020-04-21
• sinkaroid/shiguresh2★ · 2020-04-21

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23804

Security advisories

• http://secunia.com/advisories/11111
• http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0
• http://www.securityfocus.com/bid/9848
• http://www.kb.cert.org/vuls/id/831534

References

• CVE Record
• NVD entry