Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=105760556627616&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-08-17 21:00
Updated : 2016-10-17 19:34
NVD link : CVE-2003-0521
Mitre link : CVE-2003-0521
JSON object : View
CWE
Products Affected
cpanel
- cpanel