EUVD-2008-6803

Malware in sbrugna...

cPanel 11.x 'fileop' Parameter Multiple Cross Site Scripting Vulnerabilities

No description provided by source...

Cpanel 11.x - Edit E-mail Cross Site Request Forgery exploit

No description provided by source. Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 -------------------------------------------------------------------------------------- form onsubmit=return...

cPanel 11.x Fantastico LFI Vulnerability and Security Bypass

Exploit for php platform in category web applications cPanel 11.x Fantastico LFI Exploit Vulnerability Security Bypass +Version.: cPanel 11.x +Author : ahwak2000 +Home : 1337day.com + Date : 11.08.2011 + E-mail : z.u5athotmail.com +Tested On : win xp sp3 After you log in the cPanel - LFI eXploit:...

Cpanel 11.X Edit E-mail Cross Site Request Forgery Exploit

Exploit for php platform in category web applications ========================================================== Cpanel 11.X Edit E-mail Cross Site Request Forgery Exploit ========================================================== Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery...

cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)

Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...

cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)

cPanel 11.x - Cross-Site Request Forgery Edit E-mail Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...

Directory traversal

Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. dot dot in the sup3r parameter...

CVE-2008-6843

CVE-2008-6843 is a directory traversal vulnerability affecting Fantastico (used with cPanel 11.x). The issue allows remote attackers to read arbitrary files by supplying a .. payload in the sup3r parameter of index.php.reported in multiple sources (NVD, CVE records). The available connected docum...

CVE-2008-6843: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. dot dot in the sup3r parameter...

Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"

Script : Cpanel 11.x bug : language.php edite file exploit=Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" safemode off , modsecurity off Disable functions : All NONE ,access root folder ?php / Deadly Script by Super-Crystal bypass Cpanel fantastico www.arab4services.ne...

cpanel-bypass.txt

Script : Cpanel 11.x bug : language.php edite file exploit=Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" safemode off , modsecurity off Disable functions : All NONE ,access root folder '; fwrite$h,$prctl; fclose$h; $handle = fopen$POST'php', "w"; fwrite$handle,...

Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani

---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Years Old My Official Website :...

cpanel 11.x XSS / Local File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Year...

cpanel 11.x XSS / Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== cpanel 11.x XSS / Local File Inclusion Vulnerability ==================================================== ---------------------------------------------------------------- Script : Cpanel...

cPanel 11.x - Cross-Site Scripting / Local File Inclusion

---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Years Old My Official Website :...

cPanel 11.x - Cross-Site Scripting Local File Inclusion

cPanel 11.x - Cross-Site Scripting Local File Inclusion ---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar...

cpanel-lfi.txt

Fantastico In all Version Cpanel 11.x First Create directory Let the name /includes/ and upload Shell.php in /includes/ Then rename it to enclicensingservers.php :::xploit:::: http://xxx.com:2082/frontend/x/fantastico/includes/xml.php?fantasticopath=/home/user Discoverd By : joker1 for info :...

cPanel 11.x - Fantastico Local File Inclusion

cPanel 11.x - Fantastico Local File Inclusion Fantastico In all Version Cpanel 11.x First Create directory Let the name /includes/ and upload Shell.php in /includes/ Then rename it to enclicensingservers.php :::xploit::::...

Cpanel <= 11.x (Fantastico) LFI Vulnerability (sec bypass)

Exploit for unknown platform in category web applications ========================================================== Cpanel First Create directory Let the name /includes/ and upload Shell.php in /includes/ Then rename it to enclicensingservers.php :::xploit::::...