CVE-2006-1119

N/A

Description

fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message.

CVE Details

CVSS v3.1 ScoreN/A

Published3/9/2006

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

cpanel:cpanelnetenberg:fantastico_de_luxe

Weaknesses (CWE)

CWE-264

References

http://www.securityfocus.com/archive/1/426957/100/0/threaded(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/25277(cve@mitre.org)

http://www.securityfocus.com/archive/1/426957/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/25277(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.