Description (CNA)
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28447
- http://www.osvdb.org/28043
- http://www.securityfocus.com/bid/19624
- http://secunia.com/advisories/21592
- http://www.securityfocus.com/archive/1/443637/100/0/threaded
- http://www.osvdb.org/28041
- http://securityreason.com/securityalert/1442
- http://www.osvdb.org/28042
ADP enrichment
No English description supplied.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28447
- http://www.osvdb.org/28043
- http://www.securityfocus.com/bid/19624
- http://secunia.com/advisories/21592
- http://www.securityfocus.com/archive/1/443637/100/0/threaded
- http://www.osvdb.org/28041
- http://securityreason.com/securityalert/1442
- http://www.osvdb.org/28042