CVE-2008-6843: cPanel

Medium severity, CVSS 5.0. EPSS: 6.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter.

Affected products

• cPanel cPanel: version 11 only; version 11.4.19 only; version 11.8.6 only; version 11.8.6_stable only; version 11.16 only; version 11.18 only; …
• Netenberg Fantastico De Luxe: any version

Published 2009-07-02. Last modified 2026-06-16.