4107 matches found
CPanel 5.0/5.3/6.x Admin Interface HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8119/info cPanel is prone to an HTML injection vulnerability. It is possible for remote attacks to include hostile HTML and script code in requests to cPanel, which will be logged. When logs are viewed by an administrativ...
cPanel 10.9 editzonetemplate template Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20683/info cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
cPanel 5.0 Guestbook.cgi Remote Command Execution Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/6882/info A remote command execution vulnerability has been discovered in the cPanel CGI Application. This issue occurs due to insufficient sanitization of externally supplied data to the 'guestbook.cgi' script. An attack...
cPanel WebHost Manager 3.1 editpkg pkg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute i...
cPanel 9.9.1 -R3 Front Page Extension Installation Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/11456/info It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions. This vulnerability reportedly allows attackers to gain access to the content...
cPanel 5-9 Killacct Script Customer Account DNS Information Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10468/info cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by that administrator. This attack can...
cPanel 5.0 Guestbook.cgi Remote Command Execution Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/6882/info A remote command execution vulnerability has been discovered in the cPanel CGI Application. This issue occurs due to insufficient sanitization of externally supplied data to the 'guestbook.cgi' script. An attack...
cPanel <= 10.8.x (cpwrap via mysqladmin) Local Root Exploit
No description provided by source. !/usr/bin/perl -w 10/01/06 - cPanel = 10.8.x cpwrap root exploit via mysqladmin use strict; haha oh wait.. my $cpwrap = /usr/local/cpanel/bin/cpwrap; my $mysqlwrap = /usr/local/cpanel/bin/mysqlwrap; my $pwd = pwd; chomp $pwd; $ENV'PERL5LIB' = $pwd; if ! -x...
CPanel 10.9.1 Resname Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25047/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...
cPanel WebHost Manager 3.1 dochangeemail email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute i...
cPanel 10 seldir.html dir Parameter XSS
No description provided by source...
cPanel WebHost Manager 3.1 dofeaturemanager feature Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute i...
Cpanel 11.25 - CSRF Add FTP Account Exploit
No description provided by source. Exploit Title: Cpanel 11.25 - CSRF Add FTP Account Author: G0D-F4Th3r Software Link: http://www.cpanel.net/ Version: 11.25 Exploit html body onload=javascript:fireForms form method=POST name=form0 action= http://server:2082/frontend/x3/ftp/doaddftp.html input...
CPanel 11 Beta Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21287/info cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
cPanel WebHost Manager 3.1 editzone domain Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute i...
CPanel 10 DNSlook.HTML Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21142/info Cpanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...
Cpanel 11.x - Edit E-mail Cross Site Request Forgery exploit
No description provided by source. Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 -------------------------------------------------------------------------------------- form onsubmit=return...
cPanel <= 11.21 - 'wwwact' Remote Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29277/info cPanel is prone to a remote privilege-escalation vulnerability because of an unspecified error. Successfully exploiting this issue allows remote attackers to gain administrative privileges to the affected...
cPanel 5/6,Formail-Clone E-Mail Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7758/info It has been reported that cPanel is prone to an issue where a remote attacker may bypass cPanel Formail-clone local domain checks and have untrusted e-mail delivered in the context of the vulnerable host. This...
cPanel 10.8.1/10.8.2 OnMouseover Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18671/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...