bugtraq - Re: XSS in cPanel 11.x

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 24 Mar 2008 15:41:35 -0000
From: morin.josh@...il.com
To: bugtraq@...urityfocus.com
Subject: Re: XSS in cPanel 11.x

Hello, 
Is this internal or external thus do you need to be logged in? I tested external/internal and nothing it appears to just dump it out as a missing directory or manpage.

"Could not open /usr/man/man3/%3Cscript%3Ealert(LeZr)%3C/script%3E.3"

Also I believe you meant to place x3 instead of x after frontend? if not it still just says manpage not found. 

I tested this out on 11.18.3-STABLE build 21703.

Regards
Joshua