cPanel - dir Cross-Site Scripting

cPanel - dir Cross-Site Scripting source: https://www.securityfocus.com/bid/57064/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

C-Panel dir.html Cross Site Scripting

Details ============= Product: Cpanel Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.cpanel.net Advisory-Status: NotPublished Credits ============= Discovered by: Rafay Baloch of RafayHackingArticlesRHA Affected Products: ============= Cpanel's Latest Version Description...

C-Panel Cross Site Scripting

No description provided by source. CPanel Non Persistent XSS Details ============= Product: Cpanel Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.cpanel.net Advisory-Status: NotPublished Credits ============= Discovered by: Rafay Baloch of RafayHackingArticlesRHA Affected Products...

C-Panel Cross Site Scripting

CPanel Non Persistent XSS Details ============= Product: Cpanel Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.cpanel.net Advisory-Status: NotPublished Credits ============= Discovered by: Rafay Baloch of RafayHackingArticlesRHA Affected Products: ============= Cpanel's Latest...

cPanel - 'account' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57045/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

cPanel - account Cross-Site Scripting

cPanel - account Cross-Site Scripting source: https://www.securityfocus.com/bid/57045/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Wordpress 3.4.2 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is in Wordpress = 3.4.2, with this information you can get the path to the site you're in and in most of the cases cpanel's username. To see it go to: http://path/wp-includes/rss-functions.php Examples:...

vBulletin 4.2.0 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is vBulletin 4.2.0, in forumrunner. With Full Path Disclosure you can get the path to the forum you're in and also most of the times is the same cpanel's username. To see it go to:...

cPanel Pro 11.32.5.11 Cross Site Request Forgery

============================================================================== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ==============================================================================...

cpanel 11.32.5 (build 11) 11.32.5.11 CSRF Vulnerabilities

Exploit for php platform in category web applications ========== Vulnerable Software: cPanel version : 11.32.5 build 11-11.32.5.11 cPanel Pro Vulnerability: CSRF Vendor: cpanel.net ========== ===================================================================== Tested version: Your current cPanel...

TunInfoForYou SQL Injection Vulnerability

Exploit for php platform in category web applications + Exploit Title : TunInfoForYou SQL Injection + Date : 03/09/2012 + Author : Ramzi Null email protected + Facebook : http://www.facebook.com/Ramzi.Pascal + Vendor or Software Link : http://www.tuninfoforyou.com/ + Category : Web Applications +...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability

Document Title: =============== cPanel WHM v11.32.4 b9 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=665 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 665...

cPanel存在多个安全漏洞

cPanel是一款基于多种语言的空间管理面板，可通过域名来管理整个站点 cPanel存在两个未明安全漏洞，目前没有详细漏洞细节提供 Targeted Security Release 2012-05-31 Announcement cPanel Two Unspecified Vulnerabilities 0 cPanel 11.32.3.19 EDGE cPanel 11.32.3.19 CURRENT cPanel 11.32.2.28 STABLE cPanel 11.32.2.28 RELEASE cPanel 11.32.2.28 LTS cPanel 11.30.6.8 L...

Cpanel 11.X Multiple CSRF Vulnerability

Exploit for php platform in category web applications Cpanel 11.X Multiple CSRF Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.cpanel.net/ .:. Gr34T$ T0 aboud-el === Exploit === Add File...

Whois Cart Billing Cross Site Scripting / Disclosure

Title: ====== Whois Cart Billing - Multiple Web Vulnerabilities Date: ===== 2011-12-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=343 VL-ID: ===== 343 Introduction: ============= Whois.Cart is a client/administrator tool that facilitates the many tasks involved in...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...

Whois Cart Billing - Multiple Web Vulnerabilities

Document Title: =============== Whois Cart Billing - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=343 Release Date: ============= 2011-12-22 Vulnerability Laboratory ID VL-ID: ==================================== 343 Produ...

Hosting Provider InMotion Hacked, Thousands of Sites Affected

InMotion, a large hosting provider based in California, was compromised in recent days and the attackers were able to replace the index files of thousands of sites, defacing them and in some cases making it difficult for site owners to recover and reload their sites. The attack occurred on Sunday...

cPanel < 11.30.2 Multiple CSRF Vulnerabilities

No description provided by source. + Info================================================================= - Exploit Title: cPanel 11.30.2 Multiple CSRF Vulnerabilities - Author: Net.Edit0r - Home : Black-HG.Org h4ckcity.org - Version: 11.30.2 - Software Link: http://cpanel.net - Email :...