CVE-2004-1769

CVE-2004-1769 describes a critical remote code execution vulnerability in cPanel versions 9.1.0 build 34 and earlier, including 8.x, specifically within the "Allow cPanel users to reset their password via email" feature. Attackers can exploit this by manipulating the 'user' parameter in the resetpass script. This vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, suggesting potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.