CVE-2003-0521
cPanel 6.4.2 - Stored Cross-Site Scripting via Error Log or Latest Visitors Screens
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0521. PoCs published by Ory Segal.
AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in cPanel where malicious script code can be injected into requests and rendered in the browser of an administrative user when viewing logs. The provided GET request includes a simple JavaScript alert to prove the concept.
Description
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
Exploits (1)
This exploit demonstrates an HTML injection vulnerability in cPanel where malicious script code can be injected into requests and rendered in the browser of an administrative user when viewing logs. The provided GET request includes a simple JavaScript alert to prove the concept.