Description
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) scripts2/dochangeemail, the (2) supporturl parameter to (b) cgi/addon_configsupport.cgi, the (3) pkg parameter to (c) scripts/editpkg, the (4) domain parameter to (d) scripts2/domts2 and (e) scripts/editzone, the (5) feature parameter to (g) scripts2/dofeaturemanager, and the (6) ndomain parameter to (h) scripts/park.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 7
- cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting EDB-29182 · webapps · Nov 25, 2006 · verified
- cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting EDB-29183 · webapps · Nov 25, 2006 · verified
- cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting EDB-29184 · webapps · Nov 25, 2006 · verified
- cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting EDB-29185 · webapps · Nov 25, 2006 · verified
- cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting EDB-29186 · webapps · Nov 25, 2006 · verified
- cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting EDB-29187 · webapps · Nov 25, 2006 · verified
- cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting EDB-29188 · webapps · Nov 25, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 21288 vdb-entry
- http://www.aria-security.com/forum/showthread.php?t=44
- 1938 third-party-advisory
- 20061124 WebHost Manager (WHM) Multiple Cross-Site Scripting mailing-list
- whm-multiple-scripts-xss(30507) vdb-entry