CVE-2005-3505

CVE-2005-3505 describes a cross-site scripting (XSS) flaw in the Entropy Chat script used by cPanel versions 10.2.0-R82 and 10.6.0-R137. The underlying issue is that a chat message containing JavaScript in style attributes within tags such as can be processed by Internet Explorer, enabling remot...

CVE-2005-3505

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability

====================================================================== Secunia Research 04/11/2005 - cPanel Entropy Chat Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2005-3505: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

CVE-2004-2398

Vulnerability summary (CVE-2004-2398): Netenberg Fantastico De Luxe 2.8 stores database file names that reveal usernames because file names in the database directory are readable. This enables local attackers to enumerate valid usernames by listing files under /var/lib/mysql, where permissions we...

CVE-2004-2398

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5...

CVE-2004-2398: Undefined Security Weakness

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5...

CVE-2004-2308

Cross-site scripting XSS vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html...

CVE-2004-2308

CVE-2004-2308 describes a cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier . The issue arises in the dohtaccess.html component, where the dir parameter is not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML. The available connected...

CVE-2004-2308: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html...

[SA16362] cPanel Password Change Privilege Escalation Security Issue

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15770] cPanel cpsrvd.pl Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2021

The CVE-2005-2021 entry describes a cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier, caused by failure to sanitize the user parameter on the login page. Remote attackers could inject arbitrary HTML/script into a user’s browser. Affected product: cPanel (pre-9.1). The connected ...

CVE-2005-2021

Cross-site scripting XSS vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page...

CVE-2005-2021: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page...

cPanel cpsrvd.pl user Parameter XSS

The remote host is running cPanel. The version of cPanel on the remote host suffers from a cross-site scripting vulnerability due to its failure to sanitize user-supplied input to the 'user' parameter of the 'login' page. An attacker may be able to exploit this flaw to inject arbitrary HTML and...

CVE-2005-2021

Cross-site scripting XSS vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page...

cPanel 9.1 - 'User' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13996/info It is reported that cPanel is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplied data vi...

cPanel 9.1 - User Cross-Site Scripting

cPanel 9.1 - User Cross-Site Scripting source: https://www.securityfocus.com/bid/13996/info It is reported that cPanel is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficien...

CVE-2004-1875

Multiple cross-site scripting XSS vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to testfile.html, 2 file parameter to erredit.html, 3 dns parameter to dnslook.html, 4 account parameter to ignorelist.html, 5 account...