What is CVE-2008-2478?

CVE-2008-2478 is a vulnerability in Cpanel, classified under Code Injection. Published 2008-05-28.

Is CVE-2008-2478 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Cpanel

CVE-2008-2478

scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box). NOTE: the vendor disputes this, stating "I'm unable to reproduce such an issue on multiple servers running different versions of cPanel.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

Affected products

Cpanel
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2008-2478?: CVE-2008-2478 is a vulnerability in Cpanel, classified under Code Injection. Published 2008-05-28.
Is CVE-2008-2478 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.