bugtraq - WHM Panel Mail Delivery Reports crash database Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201611121211.uACCBtWv008432@sf01web1.securityfocus.com>
Date: Sat, 12 Nov 2016 12:11:55 GMT
From: iedb.team@...il.com
To: bugtraq@...urityfocus.com
Subject: WHM Panel Mail Delivery Reports crash database Vulnerability

Mail Delivery Reports crash database in whm panel 60.0 ( build 17) version local exploit
Pic:http://kkli.ir/C6LGY

#####################################

#                 Iranian Exploit DataBase And Security Team - iedb.ir

# Title : WHM Panel Mail Delivery Reports crash database Vulnerability

# Vulnerability : Crash sendmail Database in whm panel

# Version : WHM 60.0 (build 17) 

# Local Vulnerability

# Method(s): POST

# pic : http://kkli.ir/C6LGY

# Author : IeDb.Ir

# Home : Www.IeDb.Ir - Www.IeDb.Ir/acc - xssed.Ir - kkli.ir

# Vulnerability attack information site and insert site sqli and xss bug : http://xssed.Ir

# iedb team Telegram : https://telegram.me/joinchat/BdNXvD3FrFLG8tVtIfTjaQ

# Email : iedb.team@...il.com

# Archive Exploit : http://iedb.ir/exploits-6209.html

#####################################

# Description:

Hello friends.
The vulnerability is local in both panel which makes crash the email database.

Enter the login panel
In the Email field, enter the Mail Delivery Reports in.
It can do a search on email.
In this field you can put your own code in the search field.
For example, I put this code:
<Script> alert ( 'Iedb.ir') </ script>
As you can see in the image below, email database has crashed.

http://kkli.ir/C6LGY

In this field, you can enter input other great causing the crash database.
This bug bugs for local and remote as it is written.
And this security problem exists in all versions of whm panel.
Other remote exploits and exploit this panel are private.

Thanks to all friends

#####################################

Tnks To : All Member In Iedb.ir And Iedb.ir/acc And Xssed.ir

#####################################

# Archive Exploit = http://iedb.ir/exploits-6209.html

#####################################