4615 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...
CVE-2008-2043
CVE-2008-2043 affects cPanel (likely 11.18.3 and 11.19.3) and describes multiple CSRF vulnerabilities that allow remote attackers to perform admin actions. The documented vectors include executing arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html and performing act...
CVE-2008-2043
Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...
CVE-2008-2043: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...
cPanel XSRF vulnerabilities
Overview cPanel contains multiple cross-site request forgery XSRF vulnerabilities. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary commands. Description cPanel, a web-based tool that is designed to automate and control web sites and servers, contains...
CVE-2008-1499
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
Cross site scripting
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
CVE-2008-1499
The CVE-2008-1499 entry documents a Cross-site Scripting (XSS) vulnerability affecting cPanel versions 11.18.3 and 11.21.0-BETA in the frontend/x/manpage.html component. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the query string. Documented impact is ...
CVE-2008-1499
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
CVE-2008-1499: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...
cpanel11183-xss.txt
Hello I Discovered a new bug in cPanel xss Exploit : http://example.com:2082/frontend/x/manpage.html?XSS Example : 1- http://example.com:2082/frontend/x/manpage.html?alertLeZr 2- http://example.com:2082/frontend/x/manpage.html?alertdocument.cookie tested on: cPanel V 11.18.3 cPanel V 11.21.0-BETA...
cPanel 11.18.3/11.21 - 'manpage.html' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28403/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
cPanel 11.18.311.21 - manpage.html Cross-Site Scripting
cPanel 11.18.311.21 - manpage.html Cross-Site Scripting source: https://www.securityfocus.com/bid/28403/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
cpanel-folder.txt
Hello I Discovered a new bug to show the directions Folders Only on the server for example , i tried to see the folders in /etc and it worked ! Exploit : http://www.example.com:2082/frontend/x/diskusage/index.html?showtree=/etc now you will see the folders only which is inside /etc exapmle :...
cPanel <= 11.18.3 Disk Usage Module Remote Arbitrary Directory Listing
Binary data 4436.prm...
cPanel 11.18.3 - List Directories and Folders Information Disclosure
cPanel 11.18.3 - List Directories and Folders Information Disclosure source: https://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folder...
cPanel 11.18.3 - List Directories and Folders Information Disclosure
source: https://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folders on other sites that are protected by a firewall. Information obtain...
cPanel 11.x => List Directories and Folders
Hello,, I Discovered a new bug in cPanel to show the directions Folders Only on the server in Disk Usage part for example, I tried to see the folders in /etc and it worked ! that would show you a list of directions of folders and that including programes on the server, this could be dangerous ! t...
Softbiz jokes and funny pictures (index.php) sql injection
Script:Softbiz jokes & funny pictures Author:-=Mizo=- Dork:inurl:/index.php?sbcatid= Exploit:/index.php?sbcatid=-1 union select 0,1,2,concatsbadminname,0x3a,sbadminpwd,4,5,6,7,8,9 from sbjksadmin/ Admin cpanel:/path/admin Greetz: L!0n - Redcasper - SoSo H H - DC - Iraqistrike - Crackman - B0rizQ ...
softbizjokes-sql.txt
Script:Softbiz jokes & funny pictures Author:-=Mizo=- Dork:inurl:/index.php?sbcatid= Exploit:/index.php?sbcatid=-1 union select 0,1,2,concatsbadminname,0x3a,sbadminpwd,4,5,6,7,8,9 from sbjksadmin/ Admin cpanel:/path/admin Greetz: L!0n - Redcasper - SoSo H H - DC - Iraqistrike - Crackman - B0rizQ ...