>Unlabelled > C - Panel "fileop" Parameter Handling Cross Site Scripting Vulnerability

C - Panel "fileop" Parameter Handling Cross Site Scripting Vulnerability

Posted on 23 Desember 2009 by c0decstuff

Title : cPanel "fileop" Parameter Handling Cross Site Scripting Vulnerability
VUPEN ID : VUPEN/ADV-2009-3608
CVE ID : GENERIC-MAP-NOMATCH
CWE ID : VUPEN VNS Only
CVSS V2 : VUPEN VNS Only
Rated as : Low Risk 

A vulnerability has been identified in cPanel, which could be exploited by attackers to execute arbitrary scripting code. This issue is caused by an input validation error in the "frontend/x3/files/fileop.html" script when processing the "fileop" parameter, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected site.
for  Affected Product, Solution, References, Credits, Log, Details Vurnerability managemen visit to vupen
Update:advisories 2009-12-21

What's on Your Mind...

Thank f' u C0mment