CVE-2006-0574: Undefined Security Weakness

Cross-site scripting XSS vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the 1 file extension or 2 mime-type...

[Full-disclosure] cPanel 10 mime/handle.html XSS Vulnerability

mime/handle.html of cPanel 10 is vulnerable to an XSS vulnerability. This can be leveraged by entering an injected html into the extension and/or mime-type specified. I sucesfully leveraged this issue causing the page to execute the code scriptalert'hi'/script each time...