<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: fantastico de luxe</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-6926: Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for</title><link>https://patchthecve.com/cve/CVE-2008-6926.html</link><guid>https://patchthecve.com/cve/CVE-2008-6926.html</guid><pubDate>Tue, 16 Jun 2026 23:03:14 +0000</pubDate><description>MEDIUM 6.8: Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action.  NOTE: this issue only cr</description></item><item><title>CVE-2008-6843: Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attacker</title><link>https://patchthecve.com/cve/CVE-2008-6843.html</link><guid>https://patchthecve.com/cve/CVE-2008-6843.html</guid><pubDate>Tue, 16 Jun 2026 23:03:05 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter.</description></item><item><title>CVE-2008-4181: Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4</title><link>https://patchthecve.com/cve/CVE-2008-4181.html</link><guid>https://patchthecve.com/cve/CVE-2008-4181.html</guid><pubDate>Tue, 16 Jun 2026 22:57:19 +0000</pubDate><description>MEDIUM 6.8: Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for cPanel, when cPanel PHP Register Globals is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) or absolute pathname in the fa</description></item></channel></rss>