cPanel Multiple Cross-Site Scripting Vulnerabilities
BID:29125
Info
cPanel Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 29125 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-2071 CVE-2008-2070 |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | Matteo Carli |
| Vulnerable: |
cPanel cPanel 11.18.3 cPanel cPanel 11.0 cPanel cPanel 11.18.3-R21703 cPanel cPanel 11 beta cPanel cPanel 11 |
| Not Vulnerable: |
cPanel cPanel 11.18.4 |
Discussion
cPanel Multiple Cross-Site Scripting Vulnerabilities
cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
cPanel Multiple Cross-Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspected victim to follow a malicious URI.
The following proof-of-concept URIs are available:
http://www.example.com/scripts2/knowlegebase?issue=[INJECTION]&domain=
http://www.example.com/scripts2/changeip?domain=any&user=[INJECTION]
http://www.example.com/scripts2/listaccts?searchtype=domain&search=[INJECTION]&acctp=30
An attacker can exploit these issues by enticing an unsuspected victim to follow a malicious URI.
The following proof-of-concept URIs are available:
http://www.example.com/scripts2/knowlegebase?issue=[INJECTION]&domain=
http://www.example.com/scripts2/changeip?domain=any&user=[INJECTION]
http://www.example.com/scripts2/listaccts?searchtype=domain&search=[INJECTION]&acctp=30
Solution / Fix
cPanel Multiple Cross-Site Scripting Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
cPanel Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- cPanel Changelog (cPanel)
- cPanel Homepage (cPanel)
- XSS and CSRF vulnerability on Cpanel 11 (Matteo Carli