| Package | Affected versions | Patched versions |
|---|---|---|
| cpanel | = 9.9.1_r3 |
cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free