QwikSec

Security Database

CVE

CWE

Training

CVE-2008-2070

Published: May 12, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "<" and ">" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2

x_refsource_MISC

cpanel-whminterface-xss(42305)

vdb-entry

x_refsource_XF

20080509 XSS and CSRF vulnerability on Cpanel 11

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SREASON

20080509 XSS and CSRF vulnerability on cPanel 11

mailing-list

x_refsource_FULLDISC

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.