medium6.8Public exploit code
CVE-2003-0521
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CPanel 5.0/5.3/6.x - Admin Interface HTML Injection2003-07-07 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | Versions 5.0, 5.3, 6.0, 6.2, 6.4, 6.4.1 |