CVE-2008-6926

CVE-2008-6926 describes a directory traversal vulnerability in the autoinstall4imagesgalleryupgrade.php script within the Fantastico De Luxe Module for cPanel. This flaw allows remote attackers to include and execute arbitrary local files by manipulating the scriptpath_show parameter in a GoAhead action. The vulnerability has a CVSS score of 6.8, indicating medium severity, with an attack vector over the network, medium attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While exploitation requires uploading executable code to a home directory, it can bypass privilege boundaries if security settings like disable_functions and safe_mode are active. There is no evidence of active exploitation, and while an ExploitDB entry exists for a related Local File Inclusion, there are no Metasploit or Nuclei modules, and minimal community discussion or media coverage.