Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-2043

EPSS 0.47% · P65
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-2043

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to (1) execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via (2) frontend/x2/sql/adddb.html, (3) frontend/x2/sql/adduser.html, and (4) frontend/x2/ftp/doaddftp.html.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
cPanel cPanel 多个跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
cPanel是基于web的工具，用于自动化控制网站和服务器。 cPanel没有验证用户通过HTTP请求所执行的某些操作，远程攻击者可以通过跨站请求伪造(XSRF)攻击执行仅有管理员才可以执行的操作，包括创建新的数据库、添加新用户等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-2043

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-2043

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-05-01 · 9 CVEs total

CVE-2007-6339Akamai Download Manager 'DownloadManagerV2.ocx' ActiveX控件远程代码执行漏洞
CVE-2008-2044netOffice Dwins 'includes/library.php' 权限绕过漏洞和任意文件上传漏洞
CVE-2008-1381ZoneMinder ZoneMinder多个未明远程代码执行漏洞
CVE-2008-2045SugarCRM Community Edition modules/Feeds/Feed.php RSS模块信息泄露漏洞
CVE-2008-2046SiteXS CMS 'adm/index.php'跨站脚本攻击漏洞
CVE-2008-2047Angelo-Emlak ' hpz/profil.asp‘和'hpz/prodetail.asp' 多个SQL注入漏洞
CVE-2008-2048Angelo-Emlak 'hpz/admin/Default.asp' 多个SQL 跨站脚本攻击漏洞
CVE-2008-2049E-Post邮件服务器'EPSTPOP3S.EXE' 远程信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-2043

No comments yet

Leave a comment