VYPR
Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026

CVE-2004-1421

CVE-2004-1421

Description

Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the server_inc parameter to reference a URL on a remote web server that contains the code.

Affected products

3
  • Whm/Autopilot3 versions
    cpe:2.3:a:whm:whm_autopilot:2.4.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:whm:whm_autopilot:2.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:whm:whm_autopilot:2.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:whm:whm_autopilot:2.4.6.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.