CVE-2007-1455 – cPanel 10.9.x - 'Fantastico' Local File Inclusion

https://notcve.org/view.php?id=CVE-2007-1455

14 Mar 2007 — Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage parameter to includes/load_language.php or (2) the fantasticopath parameter to includes/mysqlconfig.php and certain other files. Múltiples vulnerabilidades de de escalado de ruta absoluta en el Fantastico, como el utilizado en el cPanel 10.x, permite a usuarios remotos autenticados incluir y ejecutar ficheros locales ... • https://www.exploit-db.com/exploits/3459 •