Description
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html. NOTE: the dnslook.html vector was later reported to exist in cPanel 10.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- cPanel 10 - DNSlook.HTML Cross-Site Scripting EDB-29071 · webapps · Nov 17, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 4243 vdb-entry
- 20040330 Exensive cPanel Cross Site Scripting mailing-list
- 21142 vdb-entry
- 11244 third-party-advisory
- 4215 vdb-entry
- http://www.cirt.net/advisories/cpanel_xss.shtml
- 4210 vdb-entry
- cpanel-multiple-scripts-xss(15671) vdb-entry
- 22984 third-party-advisory
- 4211 vdb-entry
- ADV-2006-4658 vdb-entry
- 10002 vdb-entry
- 4212 vdb-entry
- 4208 vdb-entry
- 4213 vdb-entry
- 4214 vdb-entry
- 4209 vdb-entry
- http://www.aria-security.com/forum/showthread.php?t=30