| cPanel \'dohtaccess.html\' Cross-Site Scripting Vulnerability |
|
Credit:
| The Aria-Security Team is credited with the discovery of this vulnerability. |
|
Description:
|
cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
This issue affects unknown versions of cPanel; we will update this BID when more details become available.
|
| Exploit:
|
An attacker can exploit this issue by enticing an unsuspected victim to follow a malicious URI.
|
|
Solution:
| Currently SecuMania is not aware of any solution for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
|
References:
|
|
Subscribe to this comment's feed
Show/Hide comments
Show/Hide comment form