bugtraq - Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040312044730.29475.qmail@www.securityfocus.com>
Date: 12 Mar 2004 04:47:30 -0000
From: Fable <fable@...h.com>
To: bugtraq@...urityfocus.com
Subject: Cpanel Request Lets Authenticated Users Conduct Cross-Site
    Scripting Attacks

####################################################
#Advisory Name: Cpanel Request Lets Authenticated Users Conduct Cross-#Site Scripting Attacks
#Discovered by: Fable
#Greets: 0x29A Crew, !AM Crew, Atomix, d3thstar, mgrd, rootthief.com.
#Versions: ??
####################################################

###Description###

cPanel & WebHost Manager (WHM) is a next generation web hosting control panel system. Both cPanel & WHM are extremely feature rich as well as include an easy to use web based interface.

###vulnerability Description###

Authenticated users are able to run cross-site scripting attacks. I noticed this vulnerability when trying to password protect a dictory. Here is an example of how you could run script on the cpanel server

http://targetserver.com:2082/frontend/x/htaccess/dohtaccess.html?dir=>&lt;script&gt;alert(0x29A Crew)&lt;/script&gt;

You are able to run all sorts of HTML on the target server, iframes, ect. 

-Fable [fable@...h.com]