cpanel.aircustomschennai.gov.in Cross Site Scripting vulnerability OBB-3751735

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

openSUSE 15 Security Update : perl-Cpanel-JSON-XS (openSUSE-SU-2023:0225-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0225-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Security update for perl-Cpanel-JSON-XS (moderate)

openSUSE Security Update: Security update for perl-Cpanel-JSON-XS Announcement ID: openSUSE-SU-2023:0225-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 An update that contains security fixes can now be installed. Description: This update for perl-Cpanel-JSON-XS...

PT-2023-35509

Name of the Vulnerable Software and Affected Versions perl-Cpanel-JSON-XS versions prior to 4.36 Description The issue concerns a security problem with decoding hash keys without ending. Additionally, there were issues with utf8 object stringification, c89 compilation regression, and a croak leak...

cPanel Data Compromise

The vulnerability of the cPanel control panel for web hosting exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Exploit for Cross-site Scripting in Cpanel

!logohttps://raw.githubusercontent.com/mr-sami-x/XSS1915/mai...

cpanel.codesprogram.com Cross Site Scripting vulnerability OBB-3330103

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

U.S. Dept Of Defense: CVE-2023-29489 XSS in cpanel at [www.███] - Securado, Oman

A cross-site scripting XSS vulnerability was found on the cpanel application hosted on a website. The vulnerability allowed an attacker to steal cookies or hijack a browser session. The cpanel was not updated due to the disabled auto-update feature. The vulnerability was mitigated by enabling the...

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw. The issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting XSS that could be abused to inject arbitrary executable...

cPanel Cross-Site Scripting

cPanel in version 11.102.0.x 11.102.0.31 / 11.106.0.x 11.106.0.x / 11.108.0.x 11.108.0.13 / 11.109.9999.x 11.109.9999.116 is vulnerable to Reflected Cross-Site Scripting via a specially crafted request to a webcall ID when displayed on the error page for cpsrvd. No source data...

Cpanel Cross-Site Scripting Vulnerability (CNVD-2023-36314)

Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions of Cpanel prior to 11.109.9999.116. The vulnerability stems...

cpanel.centos-webpanel.centos-webpanel.com Cross Site Scripting vulnerability OBB-3279724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cpanel.seal.centos-webpanel.com Cross Site Scripting vulnerability OBB-3279721

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cpanel.bugs.centos-webpanel.com Cross Site Scripting vulnerability OBB-3279717

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

Design/Logic Flaw

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

Exploit for Cross-site Scripting in Cpanel

POC for cP...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...