cpanel.net cPanel Web Host Control Panel
cPanel 9.1.0-R85 is vulnerable to Cross Site Scripting (XSS) in almost every field which is returned to the browser. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.
cPanel supports filtering of HTML and scripts in input variables, but according to cPanel was not enabled in order to support third-party themes. In the interest of properly securing cPanel, the developers have decided to enable HTML filtering as of the first release in the April 1, 2004 EDGE release.
Multiple variables in multiple cPanel programs do not filter user supplied input. This could allow an attacker to perform Cross Site Scripting (XSS) attacks against users of the cPanel system.
To check cPanel for CSS, simply access the following example URLs in a browser:
Upgrade to the April 1, 2004 EDGE release or newer.
cPanel was contacted on 3/13/2004. They initiated discussion on 3/15/2004 and decided course of action on 3/17/2004.
Updated information can be found on OSVDB.org under the following entries:
|OSVDB-4208||cPanel testfile.html email Variable XSS|
|OSVDB-4209||cPanel erredit.html file Variable XSS|
|OSVDB-4210||cPanel dnslook.html dns Variable XSS|
|OSVDB-4211||cPanel ignorelist.html account Variable XSS|
|OSVDB-4212||cPanel showlog.html account Variable XSS|
|OSVDB-4213||cPanel repairdb.html db Variable XSS|
|OSVDB-4214||cPanel doaddftp.html login Variable XSS|
|OSVDB-4215||cPanel editmsg.html account Variable XSS|
|OSVDB-4243||cPanel del.html account Variable XSS|