Zamfoo 12.6 Arbitrary Command Execution

Title: Zamfoo Multiple Arbitrary Command Executions Author: Al-Shabaab Vendor Homepage:http://www.zamfoo.com/ Version: 12.6 Intro The ZamFoo software suite is a series of WHM plugin modules also known as WHM addon modules catered towards easing the burden of web hosting providers that sell shared...

Hackers and Anti-Government Protests rage across Iraq

Four Iraqi Government websites defaced today by hacker going by name "riSky". Defaced domains include Iraq National Investment Commission website also. Where, Tens of thousands of protesters rallied across Iraq on Friday, charging that Sunni Muslims had been disenfranchised under the Shiite-led...

cPanel and WHM Multiple Cross Site Scripting Vulnerabilities

cPanel is a Unix based fully featured popular web based hosting account control panel that helps webmasters to manage their domains through a web browser. The latest version of cPanel & WHM is 11.34, which is vulnerable to multiple cross site scripting. During my bug hunting process, today I...

cPanel and WHM Multiple Cross Site Scripting Vulnerabilities

cPanel is a Unix based fully featured popular web based hosting account control panel that helps webmasters to manage their domains through a web browser. The latest version of cPanel & WHM is 11.34, which is vulnerable to multiple cross site scripting. During my bug hunting process, today I...

WHM editfilter.html Stored Cross Site Scripting

http://x3demob.cpx3demo.com:2095/webmail/x3/mail/filters/editfilter.html?account=&filtername=%22%3E%3Cimg%20src=x%20onerror=prompt0;%3E http://localhost/webmail/x3/mail/filters/editfilter.html?account=&filtername=%22%3E%3Cimg%20src=x%20onerror=prompt0;%3E -- Warm Regards, Rafay Baloch...

cPanel WebHost Manager (WHM) - webmailx3mailclientconf.html?acct Cross-Site Scripting

cPanel WebHost Manager WHM - webmailx3mailclientconf.html?acct Cross-Site Scripting source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...

C-Panel / WHM 11.34.0 Cross Site Scripting

cPanel & WHM Cross Site Scripting Vulnerability Date: 27 Dec 2012 Author: Christy Philip Mathew Vendor or Software Link: http://cpanel.net/demo/ Version: cPanel & WHM 11.34.0 build 8 Category:: Remote POC Video - http://www.youtube.com/watch?v=HJ64X2y8o0E WHM 1. Basic cPanel ,WHM Setup - NameServ...

WHM - filtername Cross-Site Scripting

WHM - filtername Cross-Site Scripting source: https://www.securityfocus.com/bid/57061/info WHM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

cPanel - detailbw.html Multiple Cross-Site Scripting Vulnerabilities

cPanel - detailbw.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

cPanel WebHost Manager (WHM) - '/webmail/x3/mail/clientconf.html?acct' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

cPanel - 'detailbw.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

WHM - 'filtername' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57061/info WHM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

cPanel Pro 11.32.5.11 Cross Site Request Forgery

============================================================================== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ==============================================================================...

cpanel 11.32.5 (build 11) 11.32.5.11 CSRF Vulnerabilities

Exploit for php platform in category web applications ========== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ========== ===================================================================== Tested version: Your current cPanel...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

cPanel X / WHM 11.30.0 (build 27) Read Files / Symlinks Bypass

Exploit for php platform in category web applications cPanel X / WHM 11.30.0 build 27 Read Files / Symlinks Bypass !! Version : 11.30.0 Author : ZxH-Labs Date : 1st OF Jun 2011 Tested On CentOS Software Link : http://www.cpanel.net Home: 1337day.com Inj3ct0r Exploit DataBase + Exploiting cPanel x...

cPanel WHM v11.24.7.x - Multiple Cross Site Vulnerabilities

Document Title: =============== cPanel WHM v11.24.7.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-06-07 Vulnerability Laboratory ID VL-ID: ==================================== 48 Product & Service Introduction: =============================== cPanel provides an intuitiv...

WHMCS v4.2.1 (install.php) file Vulnerabilities

Exploit for php platform in category web applications =============================================== WHMCS v4.2.1 install.php file Vulnerabilities =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

cPanel HTTP Response Splitting Vulnerability

Exploit for unknown platform in category web applications ============================================ cPanel HTTP Response Splitting Vulnerability ============================================ Vendor ------ cPanel Inc. - http://www.cpanel.net Vulnerability Information -------------------------...