Unrated severityNVD Advisory· Published Feb 8, 2007· Updated Jun 16, 2026
CVE-2007-0854
CVE-2007-0854
Description
Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code via a URL in the obj parameter. NOTE: a third party claims that this issue is not file inclusion because the contents are not parsed, but the attack can be used to overwrite files in /var/cpanel/objcache or provide unexpected web page contents.
Affected products
2cpe:2.3:a:cpanel:webhost_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cpanel:webhost_manager:*:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
10- www.securityfocus.com/archive/1/459449/100/0/threadednvdExploit
- www.securityfocus.com/bid/22455nvdExploit
- secunia.com/advisories/24097nvdVendor Advisory
- www.vupen.com/english/advisories/2007/0545nvdVendor Advisory
- changelog.cpanel.net/index.cginvd
- osvdb.org/32043nvd
- osvdb.org/33240nvd
- osvdb.org/35750nvd
- www.securityfocus.com/archive/1/459409/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32400nvd
News mentions
0No linked articles in our index yet.