aria-cpanel.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=68 ----------------------------------------------------------- Vulnerability: cPanel Version 11 Pops.Html Cross-Site Scripting PoC: http://target:2082/mail/pops.html?domain=XSS Contact:...

[Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=68 ----------------------------------------------------------- Vulnerability: cPanel Version 11 Pops.Html Cross-Site Scripting PoC...

cPanel Web Hosting Manager 3.1 - Multiple Cross-Site Scripting Vulnerabilities

cPanel Web Hosting Manager 3.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21498/info Web Hosting Manager is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

cPanel Web Hosting Manager 3.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21498/info Web Hosting Manager is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of ...

[Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=57 ----------------------------------------------------------- Software: CPanel Tested On CPanel 11 Beta at cpanel.net Poc:...

CVE-2006-6198

Multiple cross-site scripting XSS vulnerabilities in cPanel WebHost Manager WHM 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 email parameter to a scripts2/dochangeemail, the 2 supporturl parameter to b cgi/addonconfigsupport.cgi, the 3 pkg parameter to c...

CVE-2006-6198

Multiple cross-site scripting XSS vulnerabilities in cPanel WebHost Manager WHM 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 email parameter to a scripts2/dochangeemail, the 2 supporturl parameter to b cgi/addonconfigsupport.cgi, the 3 pkg parameter to c...

CVE-2006-6198

CVE-2006-6198 documents multiple XSS vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0. The flaws enable remote authenticated users to inject arbitrary web script or HTML via several parameters in the web UI: (1) email in scripts2/dochangeemail, (2) supporturl in cgi/addon_configsupport.cgi, ...

CVE-2006-6198: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in cPanel WebHost Manager WHM 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 email parameter to a scripts2/dochangeemail, the 2 supporturl parameter to b cgi/addonconfigsupport.cgi, the 3 pkg parameter to c...

aria-cpanel11beta.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=44 ----------------------------------------------------------- Software: CPanel Tested On CPanel 11 Beta Poc: http://target:2082/frontend/x/files/fileop.html?opdir=PATH&opfile=FILENAME&fileop=XSS...

cPanel WebHost Manager 3.1 - domts2?domain Cross-Site Scripting

cPanel WebHost Manager 3.1 - domts2?domain Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

cPanel WebHost Manager 3.1 - addon_configsupport.cgi?supporturl Cross-Site Scripting

cPanel WebHost Manager 3.1 - addonconfigsupport.cgi?supporturl Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...

cPanel WebHost Manager 3.1 - dofeaturemanager?feature Cross-Site Scripting

cPanel WebHost Manager 3.1 - dofeaturemanager?feature Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

cPanel WebHost Manager 3.1 - dochangeemail?email Cross-Site Scripting

cPanel WebHost Manager 3.1 - dochangeemail?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

cPanel WebHost Manager 3.1 - editpkg?pkg Cross-Site Scripting

cPanel WebHost Manager 3.1 - editpkg?pkg Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

cPanel 11 Beta - Multiple Cross-Site Scripting Vulnerabilities

cPanel 11 Beta - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21287/info cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...