2008-09-23 17:25:42 2017-09-29 03:32:02

Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) or absolute pathname in the fantasticopath parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Netenberg Fantastico de luxe 2.10.2 R31 (not an official CPE) Netenberg Fantastico de luxe 2.8.r8 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R33 (not an official CPE) Netenberg Fantastico de luxe 2.8.r9 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R32 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R39 (not an official CPE) Netenberg Fantastico de luxe 2.8.r1 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R41 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R40 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R46 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R8 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R45 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R7 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R9 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R42 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R4 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R3 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R8 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R44 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R6 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R9 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R43 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R5 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R2 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R8 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R7 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R9 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R9 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R4 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R6 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R15 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R3 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R5 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R14 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R6 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R8 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R5 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R7 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R16 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R2 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R11 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R10 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R2 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R4 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R13 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R3 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R12 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R15 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R14 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R16 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R18 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R16 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R11 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R13 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R10 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R12 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R13 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R17 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R15 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R12 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R14 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R11 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R10 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R10 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R11 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R17 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R10 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R17 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R19 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R18 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R12 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R11 (not an official CPE) Netenberg Fantastico de luxe 2.8.6 R2 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R4 (not an official CPE) Netenberg Fantastico de luxe 2.8.6 R3 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R5 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R2 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R3 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R2 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R4 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R8 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R3 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R5 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R9 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R27 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R2 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R6 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R3 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R6 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R7 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R24 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R7 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R4 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R23 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R6 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R26 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R5 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R7 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R25 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R20 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R22 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R21 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R28 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R29 (not an official CPE) Netenberg Fantastico de luxe 2.8.r6 (not an official CPE) Netenberg Fantastico de luxe 2.8.r7 (not an official CPE) Netenberg Fantastico de luxe 2.8.r2 (not an official CPE) Netenberg Fantastico de luxe 2.8.r3 (not an official CPE) Netenberg Fantastico de luxe 2.8.r4 (not an official CPE) Netenberg Fantastico de luxe 2.8.r5 (not an official CPE) Netenberg Fantastico de luxe 2.10.4 R1 (not an official CPE) Netenberg Fantastico de luxe 2.8.8 R1 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R1 (not an official CPE) Netenberg Fantastico de luxe 2.10.0 R1 (not an official CPE) Netenberg Fantastico de luxe 2.8.4 R1 (not an official CPE) Netenberg Fantastico de luxe 2.8.r12 (not an official CPE) Netenberg Fantastico de luxe 2.8.r11 (not an official CPE) Netenberg Fantastico de luxe 2.8.6 R1 (not an official CPE) Netenberg Fantastico de luxe 2.8.2 R1 (not an official CPE) Netenberg Fantastico de luxe 2.8.r19 (not an official CPE) Netenberg Fantastico de luxe 2.8.r10 (not an official CPE) Netenberg Fantastico de luxe 2.8.r14 (not an official CPE) Netenberg Fantastico de luxe 2.8.r13 (not an official CPE) Netenberg Fantastico de luxe 2.8.r16 (not an official CPE) Netenberg Fantastico de luxe 2.8.r15 (not an official CPE) Netenberg Fantastico de luxe 2.8.r18 (not an official CPE) Netenberg Fantastico de luxe 2.8.r17 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R30 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R38 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R35 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R34 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R37 (not an official CPE) Netenberg Fantastico de luxe 2.10.2 R36 (not an official CPE)