WHM - 'filtername' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57061/info WHM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

cPanel WebHost Manager (WHM) - webmailx3mailclientconf.html?acct Cross-Site Scripting

cPanel WebHost Manager WHM - webmailx3mailclientconf.html?acct Cross-Site Scripting source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...

cPanel - detailbw.html Multiple Cross-Site Scripting Vulnerabilities

cPanel - detailbw.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

cPanel Pro 11.32.5.11 Cross Site Request Forgery

============================================================================== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ==============================================================================...

cpanel 11.32.5 (build 11) 11.32.5.11 CSRF Vulnerabilities

Exploit for php platform in category web applications ========== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ========== ===================================================================== Tested version: Your current cPanel...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

cPanel X / WHM 11.30.0 (build 27) Read Files / Symlinks Bypass

Exploit for php platform in category web applications cPanel X / WHM 11.30.0 build 27 Read Files / Symlinks Bypass !! Version : 11.30.0 Author : ZxH-Labs Date : 1st OF Jun 2011 Tested On CentOS Software Link : http://www.cpanel.net Home: 1337day.com Inj3ct0r Exploit DataBase + Exploiting cPanel x...

cPanel WHM v11.24.7.x - Multiple Cross Site Vulnerabilities

Document Title: =============== cPanel WHM v11.24.7.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-06-07 Vulnerability Laboratory ID VL-ID: ==================================== 48 Product & Service Introduction: =============================== cPanel provides an intuitiv...

WHMCS v4.2.1 (install.php) file Vulnerabilities

Exploit for php platform in category web applications =============================================== WHMCS v4.2.1 install.php file Vulnerabilities =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

cPanel HTTP Response Splitting Vulnerability

Exploit for unknown platform in category web applications ============================================ cPanel HTTP Response Splitting Vulnerability ============================================ Vendor ------ cPanel Inc. - http://www.cpanel.net Vulnerability Information -------------------------...

cPanel and WHM 11.25 - 'failurl' HTTP Response Splitting

source: https://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client...

cPanel and WHM 11.25 - failurl HTTP Response Splitting

cPanel and WHM 11.25 - failurl HTTP Response Splitting source: https://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This...

Cross site scripting

The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "" characters in the 1 issue parameter to scripts2/knowlegebase, 2 user parameter to...

CVE-2008-2071

Multiple cross-site request forgery CSRF vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors...

CVE-2008-2070

The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "" characters in the 1 issue parameter to scripts2/knowlegebase, 2 user parameter to...

CVE-2008-2071

CVE-2008-2071 describes CSRF flaws in the cPanel/WHM web interface. Affected: WHM/cPanel versions affected by 11.18.4+ and 11.22.3+ patches (the issue is present in 11.18.0–11.18.3 and 11.22.0–11.22.2 as noted by sources). The vulnerability allows remote attackers to perform unauthorized actions ...

CVE-2008-2070

The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "" characters in the 1 issue parameter to scripts2/knowlegebase, 2 user parameter to...

CVE-2008-2070

The CVE-2008-2070 entry concerns the WHM interface of cPanel: affected are WHM/cPanel builds around 11.15.0/11.18.x and 11.22.x, where multiple user-supplied inputs (notably issue in scripts2/knowlegebase, user in scripts2/changeip, and search in scripts2/listaccts) permit bypassing XSS protectio...