PT-2003-1690

CVE-2003-0521

·

Published

2003-07-10

·

Updated

2016-10-18

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: cPanel version 6.4.2
Description: A cross-site scripting (XSS) issue allows remote attackers to insert arbitrary HTML, potentially gaining cPanel administrator privileges. This occurs when a script in a URL is logged but not properly quoted when displayed via the Error Log or Latest Visitors screens.
Recommendations: For cPanel version 6.4.2, update to a version that addresses this issue to prevent potential exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2003-0521
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com