CVE-2007-0890

Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.

Link	Resource
http://changelog.cpanel.net/index.cgi
http://www.securityfocus.com/bid/22474	Exploit
http://secunia.com/advisories/24106
http://osvdb.org/32044
http://www.vupen.com/english/advisories/2007/0568
http://www.securityfocus.com/archive/1/459585/100/0/threaded

Configuration 1

cpe:2.3:a:cpanel:webhost_manager:6.4:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:7.0:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:9.1.0_r85:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:8.0:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:9.4.1_r64:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:11:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:10.2.0_r82:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:6.4.1:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:6.2:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:10.6.0_r137:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:5.0:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:10.8.1_build84:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:9.0:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:9.1:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:10.8.2_118:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:6.4.2_stable_48:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:5.3:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:6.0:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:11.0:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:10.9:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:10.8.1_113:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:11_beta:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:9.9.1_r3:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:6.4.2:*:*:*:*:*:*:*

---

Published : 2007-02-12 11:28

Updated : 2018-10-16 04:35

---

NVD link : CVE-2007-0890

Mitre link : CVE-2007-0890

No products.

NVD-CWE-Other