3980 matches found
cPanel 11.x - '/scripts2/listaccts?search' Cross-Site Scripting
source: https://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...
cPanel跨站请求伪造漏洞
CVECAN ID: CVE-2008-2043 cPanel是基于web的工具，用于自动化控制网站和服务器。 cPanel没有验证用户通过HTTP请求所执行的某些操作，这允许远程攻击者通过跨站请求伪造（XSRF）攻击执行仅有管理员才可以执行的操作，包括创建新的数据库、添加新用户等。 cPanel 11.18.3 build ID 21703 临时解决方法： 启用Referrer检查： 1 导航至Server configuration 2 找到Tweak Settings 3 在WebHost Manager中找到Security 4 选择复选框并保存页面 厂商补丁： cPanel...
CVE-2008-2043
Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...
CVE-2008-2043
CVE-2008-2043 affects cPanel (likely 11.18.3 and 11.19.3) and describes multiple CSRF vulnerabilities that allow remote attackers to perform admin actions. The documented vectors include executing arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html and performing act...
CVE-2008-2043
Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...
cPanel XSRF vulnerabilities
Overview cPanel contains multiple cross-site request forgery XSRF vulnerabilities. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary commands. Description cPanel, a web-based tool that is designed to automate and control web sites and servers, contains...
CVE-2008-1499
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
Cross site scripting
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
CVE-2008-1499
The CVE-2008-1499 entry documents a Cross-site Scripting (XSS) vulnerability affecting cPanel versions 11.18.3 and 11.21.0-BETA in the frontend/x/manpage.html component. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the query string. Documented impact is ...
CVE-2008-1499
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
cpanel11183-xss.txt
Hello I Discovered a new bug in cPanel xss Exploit : http://example.com:2082/frontend/x/manpage.html?XSS Example : 1- http://example.com:2082/frontend/x/manpage.html?alertLeZr 2- http://example.com:2082/frontend/x/manpage.html?alertdocument.cookie tested on: cPanel V 11.18.3 cPanel V 11.21.0-BETA...
cPanel 11.18.3/11.21 - 'manpage.html' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28403/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
cPanel 11.18.311.21 - manpage.html Cross-Site Scripting
cPanel 11.18.311.21 - manpage.html Cross-Site Scripting source: https://www.securityfocus.com/bid/28403/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
cpanel-folder.txt
Hello I Discovered a new bug to show the directions Folders Only on the server for example , i tried to see the folders in /etc and it worked ! Exploit : http://www.example.com:2082/frontend/x/diskusage/index.html?showtree=/etc now you will see the folders only which is inside /etc exapmle :...
cPanel <= 11.18.3 Disk Usage Module Remote Arbitrary Directory Listing
Binary data 4436.prm...
cPanel 11.18.3 - List Directories and Folders Information Disclosure
cPanel 11.18.3 - List Directories and Folders Information Disclosure source: https://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folder...
cPanel 11.x => List Directories and Folders
Hello,, I Discovered a new bug in cPanel to show the directions Folders Only on the server in Disk Usage part for example, I tried to see the folders in /etc and it worked ! that would show you a list of directions of folders and that including programes on the server, this could be dangerous ! t...
cPanel 11.18.3 - List Directories and Folders Information Disclosure
source: https://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folders on other sites that are protected by a firewall. Information obtain...
Softbiz jokes and funny pictures (index.php) sql injection
Script:Softbiz jokes & funny pictures Author:-=Mizo=- Dork:inurl:/index.php?sbcatid= Exploit:/index.php?sbcatid=-1 union select 0,1,2,concatsbadminname,0x3a,sbadminpwd,4,5,6,7,8,9 from sbjksadmin/ Admin cpanel:/path/admin Greetz: L!0n - Redcasper - SoSo H H - DC - Iraqistrike - Crackman - B0rizQ ...