Description
Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary web script or HTML via the rurl parameter. NOTE: some of these details are obtained from third party information.
References
- 27308 vdb-entry
- 28561 third-party-advisory
- 20080116 cPanel Hosting Manager (dohtaccess.html) mailing-list
- http://aria-security.net/forum/showthread.php?p=1238
- 3561 third-party-advisory