CVEvulnerability
CVE-2008-6927
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allow remote attackers to inject arbitrary web script or HTML via the (1) localapp, (2) updatedir, (3) scriptpath_show, (4) domain_show, (5) thispage, (6) thisapp, and (7) currentversion parameters in an Upgrade action.
Affected configurations
• cpanel cpanel
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/32423 Vendor Advisory
- http://www.netenberg.com/forum/index.php?topic=6832 www.netenberg.com
- http://www.osvdb.org/49518 Exploit
- http://www.securityfocus.com/archive/1/497964/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/498519 Exploit
- http://www.securityfocus.com/archive/1/498526 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46253 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6897 www.exploit-db.com
- http://secunia.com/advisories/32423 Vendor Advisory
- http://www.netenberg.com/forum/index.php?topic=6832 www.netenberg.com
- http://www.osvdb.org/49518 Exploit
- http://www.securityfocus.com/archive/1/497964/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/498519 Exploit
- http://www.securityfocus.com/archive/1/498526 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46253 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6897 www.exploit-db.com