Validate-CVE-2023-29489-scanner-

Validate-CVE-2023-29489-scanner 灵感来自 https://github.com/haxor1337x/Scanner-CVE-2023-29489 验证 Cpanel 网页调用中的 CVE-2023-29489 XSS 漏洞。 功能： 基于 CIDR 或一组范围进行大规模 IP 扫描 基于 cpanel 的特定常见端口进行扫描 要求： Python 3.10+ Selenium Google Chrome 用法 python3 xssscanner.py --headless --ignore-certificate-errors 确保...

CVE-2023-29489

简介 在 cPanel 的某些版本中发现了一个可利用的反射型跨站脚本（XSS）漏洞，并分配了编号 CVE-2023-29489。该漏洞允许攻击者在无需认证的情况下执行任意 JavaScript 代码。即使 cPanel 管理端口未对外暴露，该 XSS 漏洞仍可能被利用。如果网站由 cPanel 管理，则 80 和 443 端口上的网站也容易受到此漏洞的影响。 关于 在 cPanel 11.109.9999.116 之前版本中发现了一个问题。通过无效的 webcall ID，跨站脚本可能会在 cpsrvd 错误页面上发生。 安装 步骤 1：在终端中使用以下命令安装 CVE-2023-294...

cPanel < 11.109.9999.116 - Cross-Site Scripting

An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. id: CVE-2023-29489 info: name: cPanel 11.109.9999.116 - Cross-Site Scripting author: DhiyaneshDk,0xKayala severity: medium description: | An issue was...

tool-29489

Tool-29489 Resumen 🔍: Esta herramienta se utiliza para identificar URLs con la vulnerabilidad CVE-2023-29489. La herramienta utiliza payloads para identificar el fallo. Menú de ayuda de tool-29489: python main.py help URL inputfile outputfile -h o --help : Para mostrar las opciones de ayuda. -u o...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

Design/Logic Flaw

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489: Improper Neutralization of Input During Web Page Generation

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

PT-2023-2904

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 11.109.9999.116 cPanel versions prior to 11.108.0.13 cPanel versions prior to 11.106.0.18 cPanel versions prior to 11.102.0.31 Description: A reflected Cross-Site Scripting XSS vulnerability was discovered in cPanel...