Unscored CVE-2004-1849 EUVD-2004-1842GHSA-x764-624g-c724

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (…

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html.

References

4530 vdb-entry
20040323 More Cpanel Vuls (cross site scripting) mailing-list
1009541 vdb-entry
9965 vdb-entry
4529 vdb-entry
cpanel-dodelautores-addhandle-xss(15517) vdb-entry