Vendors / Whm Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Whm records in CISA KEV No Whm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0423 · Published 2005-02-12 · No fix listed
Priority LOW 33
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07888 · Published 2005-02-12 · No fix listed
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04049 · Published 2005-02-12 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0