CVE-2004-1420

MEDIO 4.3CVE-2004-1420 · Published 31/12/2004 · updated 16/06/2026

In breve

CVE-2004-1420 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda autopilot (whm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.0%, superiore al 90.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
autopilot whm	`= 2.4.5= 2.4.6= 2.4.6.5`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.

References

marc.info
marc.info
secunia.com/advisories/13673 · Patch
gulftech.org · Exploit
securityfocus.com/bid/12119 · Exploit
whmautopilot.com/forum/lofiversion/index.php/t6785.html · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/18700

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free