3983 matches found
cPanel Multiple CSRF Vulnerabilities
No description provided by source. Create Database: body onload="document.forms.g.submit;" form method="post" action="http://sEc-r1z.com:2082/frontend/x3/sql/addb.html" name="mainform" id="mainform" h4Create New Database/h4 div class="highlight" table cellpadding="3" cellspacing="0" tr tdlabel...
Cpanel Image Manager Local File Include Exploit
No description provided by source. Cpanel Image Manager Local File Include Exploit Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Email : [email protected] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= How To Exploit :...
Cpanel Bypass Safe mode [ extract tar.gz by Cpanel ]
==================================================== Cpanel Bypass Safe mode extract tar.gz by Cpanel ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / ...
cPanel HTTP Response Splitting Vulnerability
No description provided by source. Security Advisory by Trancer January 21 2010 http://www.rec-sec.com "Hacking, however, is an art, not a science." Vendor ------ cPanel Inc. - http://www.cpanel.net Vulnerability Information ------------------------- Application description: "cPanel is the indust...
cPanel failurl参数HTTP响应拆分漏洞
BUGTRAQ ID: 37902 cPanel是基于Web的工具，用于自动化控制网站和服务器。 cPanel的登录页面在用户登录失败的情况下在Location HTTP头中将failurl参数值返回给了客户端。由于没有对这个参数值执行任何过滤，用户提交恶意登录请求就可以执行HTTP响应拆分攻击，导致在用户浏览器会话中执行任意代码。 cPanel cPanel 11.25 cPanel WebHost Manager 11.25 厂商补丁： cPanel ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
cPanel HTTP Response Splitting
Recognize-Security - cPanel HTTP Response Splitting Vulnerability ----------------------------------------------------------------- Security Advisory by Trancer January 21 2010 http://www.rec-sec.com "Hacking, however, is an art, not a science." Vendor ------ cPanel Inc. - http://www.cpanel.net...
cPanel - HTTP Response Splitting
cPanel - HTTP Response Splitting Recognize-Security - cPanel HTTP Response Splitting Vulnerability ----------------------------------------------------------------- Security Advisory by Trancer January 21 2010 http://www.rec-sec.com "Hacking, however, is an art, not a science." Vendor ------ cPan...
cPanel HTTP Response Splitting Vulnerability
Exploit for unknown platform in category web applications ============================================ cPanel HTTP Response Splitting Vulnerability ============================================ Vendor ------ cPanel Inc. - http://www.cpanel.net Vulnerability Information -------------------------...
cPanel and WHM 11.25 - 'failurl' HTTP Response Splitting
source: https://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client...
cPanel and WHM 11.25 - failurl HTTP Response Splitting
cPanel and WHM 11.25 - failurl HTTP Response Splitting source: https://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This...
cPanel - HTTP Response Splitting
Recognize-Security - cPanel HTTP Response Splitting Vulnerability ----------------------------------------------------------------- Security Advisory by Trancer January 21 2010 http://www.rec-sec.com "Hacking, however, is an art, not a science." Vendor ------ cPanel Inc. - http://www.cpanel.net...
cPanel fileop参数跨站脚本漏洞
BUGTRAQ ID: 37394 cPanel是基于Web的工具，用于自动化控制网站和服务器。 cPanel没有正确地过滤提交给frontend/x3/files/fileop.html的fileop参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，在用户浏览器会话中执行任意代码。 cPanel 11.x 厂商补丁： cPanel ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cpanel.net...
Cpanel 11 Cross Site Scripting
----------------------------------------------------------- Cpanel 11 Xss Exploit ----------------------------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM Hey ... This is how you do it :...
Cpanel 11 Xss
No description provided by source. ----------------------------------------------------------- Cpanel 11 Xss Exploit ----------------------------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM Hey ... This is how you do it :...
cPanel 11.x - fileop Multiple Cross-Site Scripting Vulnerabilities
cPanel 11.x - fileop Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37394/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues...
cPanel 11.x - 'fileop' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37394/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...
Path traversal
Absolute path traversal vulnerability in the Disk Usage module frontend/x/diskusage/index.html in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter...
CVE-2008-7142
Absolute path traversal vulnerability in the Disk Usage module frontend/x/diskusage/index.html in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter...
CVE-2008-7142
CVE-2008-7142 describes an absolute path traversal in the Disk Usage module of cPanel (frontend/x/diskusage/index.html) on version 11.18.3. By manipulating the showtree parameter, remote attackers can list arbitrary directories. The provided documents confirm the vulnerable component and the natu...
