CVEvulnerability
CVE-2004-1875
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-03-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html. NOTE: the dnslook.html vector was later reported to exist in cPanel 10.
Affected configurations
• cpanel cpanel 9.1.0 r85
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=108066561608676&w=2 marc.info
- http://secunia.com/advisories/11244 Patch, Vendor Advisory
- http://secunia.com/advisories/22984 Vendor Advisory
- http://www.aria-security.com/forum/showthread.php?t=30 www.aria-security.com
- http://www.cirt.net/advisories/cpanel_xss.shtml Patch, Vendor Advisory
- http://www.osvdb.org/4208 Vendor Advisory
- http://www.osvdb.org/4209 Vendor Advisory
- http://www.osvdb.org/4210 Vendor Advisory
- http://www.osvdb.org/4211 www.osvdb.org
- http://www.osvdb.org/4212 Vendor Advisory
- http://www.osvdb.org/4213 Vendor Advisory
- http://www.osvdb.org/4214 Vendor Advisory
- http://www.osvdb.org/4215 Vendor Advisory
- http://www.osvdb.org/4243 Vendor Advisory
- http://www.securityfocus.com/bid/10002 Vendor Advisory
- http://www.securityfocus.com/bid/21142 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4658 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15671 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=108066561608676&w=2 marc.info
- http://secunia.com/advisories/11244 Patch, Vendor Advisory
- http://secunia.com/advisories/22984 Vendor Advisory
- http://www.aria-security.com/forum/showthread.php?t=30 www.aria-security.com
- http://www.cirt.net/advisories/cpanel_xss.shtml Patch, Vendor Advisory
- http://www.osvdb.org/4208 Vendor Advisory
- http://www.osvdb.org/4209 Vendor Advisory
- http://www.osvdb.org/4210 Vendor Advisory
- http://www.osvdb.org/4211 www.osvdb.org
- http://www.osvdb.org/4212 Vendor Advisory
- http://www.osvdb.org/4213 Vendor Advisory
- http://www.osvdb.org/4214 Vendor Advisory
- http://www.osvdb.org/4215 Vendor Advisory
- http://www.osvdb.org/4243 Vendor Advisory
- http://www.securityfocus.com/bid/10002 Vendor Advisory
- http://www.securityfocus.com/bid/21142 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4658 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15671 exchange.xforce.ibmcloud.com