CVE-2007-4022

Cross-site scripting XSS vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary web script or HTML via the resname parameter...

CVE-2007-4022

CVE-2007-4022 describes an XSS vulnerability in cPanel 10.9.1, specifically in frontend/x/htaccess/changepro.html where the resname parameter can be exploited to inject arbitrary web script or HTML. The affected component is a web-frontend page used for htaccess configuration; the input vector is...

cpanel1091-xss.txt

Aria-Security Team cPanel 10.9.1 XSS /frontend/x/htaccess/changepro.html?protected=1&resname=XSSGOESHERE click on Go Back... Voila! Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...