CVE-2008-7142: cPanel

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter.

Affected products

• cPanel cPanel: version 11.18.3 only

Published 2009-09-01. Last modified 2026-06-16.