4088 matches found
CVE-2006-0533
CVE-2006-0533 corresponds to a cross-site scripting (XSS) vulnerability in the cPanel component webmailaging.cgi. The issue allows remote attackers to inject arbitrary web script or HTML through the numdays parameter. Connected documents confirm the vulnerability description but do not provide a ...
[Full-disclosure] cPanel Multiple Cross Site Scripting Vulnerability
Title: cPanel Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 22 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Web Hosting Manager Vendor: cPanel Vulnerability: Cross Site Scripting / Cookie-Theft /...
cPanel 10.8.1 - Multiple Cross-Site Scripting Vulnerabilities
cPanel 10.8.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16482/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues ...
cPanel 10.8.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16482/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...
WHMCompleteSolution XSS vuln.
WHMCompleteSolution XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/whmcompletesolution-xss-vuln.html vendor:http://www.whmcs.com/ affected version:2.1 and prior Product Description: WHMCompleteSolution has the features that all web hosts...
Cpanel advisory
Advisory 2 $ Tittle: Cpanel demo account $ Author: UserMaster $ Contact: [email protected] $ Date: Sunday,5 , 2005 $ Website: http://defacersecurity.com $ Risk: Medium $ Vendor URL: http://cpanel.net/ $ Affected Software: All builds on all platforms are vulnerable up to and including 9.1.0 buil...
CVE-2005-3505
Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...
CVE-2005-3505
CVE-2005-3505 describes a cross-site scripting (XSS) flaw in the Entropy Chat script used by cPanel versions 10.2.0-R82 and 10.6.0-R137. The underlying issue is that a chat message containing JavaScript in style attributes within tags such as can be processed by Internet Explorer, enabling remot...
CVE-2005-3505
Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...
Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability
====================================================================== Secunia Research 04/11/2005 - cPanel Entropy Chat Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2004-2398
Vulnerability summary (CVE-2004-2398): Netenberg Fantastico De Luxe 2.8 stores database file names that reveal usernames because file names in the database directory are readable. This enables local attackers to enumerate valid usernames by listing files under /var/lib/mysql, where permissions we...
CVE-2004-2398
Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5...
CVE-2004-2308
Cross-site scripting XSS vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html...
CVE-2004-2308
CVE-2004-2308 describes a cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier . The issue arises in the dohtaccess.html component, where the dir parameter is not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML. The available connected...
[SA16362] cPanel Password Change Privilege Escalation Security Issue
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[SA15770] cPanel cpsrvd.pl Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-2021
The CVE-2005-2021 entry describes a cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier, caused by failure to sanitize the user parameter on the login page. Remote attackers could inject arbitrary HTML/script into a user’s browser. Affected product: cPanel (pre-9.1). The connected ...
CVE-2005-2021
Cross-site scripting XSS vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page...
cPanel cpsrvd.pl user Parameter XSS
The remote host is running cPanel. The version of cPanel on the remote host suffers from a cross-site scripting vulnerability due to its failure to sanitize user-supplied input to the 'user' parameter of the 'login' page. An attacker may be able to exploit this flaw to inject arbitrary HTML and...