PatchTheCVEwhm autopilot vulnerabilities and fixes
Recent CVEs affecting whm autopilot, with upgrade or downgrade steps. 3 tracked.
Also searched as: whmautopilot.
whm autopilot has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-12-31. Highest priority: CVE-2004-1421 (score 54/100).
- CVE-2004-2524 MEDIUM 5.0 DOWNGRADE clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext u
- CVE-2004-1422 MEDIUM 5.0 DOWNGRADE WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which rev
- CVE-2004-1421 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tab
FAQ
How do I fix whm autopilot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is whm autopilot being exploited right now?
None of the tracked whm autopilot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which whm autopilot CVE should I patch first?
CVE-2004-1421 currently ranks highest (54/100): Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tab.