CVE-2005-2021

Cpanel - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page.

Exploits (1)

exploitdb WRITEUP VERIFIED

by [email protected] · textwebappsphp

https://www.exploit-db.com/exploits/25846

View Code ZIP pw:eip

References (1)

Core 1

Core References

Exploit, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/13996

Scores

EPSS 0.0034

EPSS Percentile 56.6%

Details

Status published

Products (12)

cpanel/cpanel 5.0

cpanel/cpanel 5.3

cpanel/cpanel 6.0

cpanel/cpanel 6.2

cpanel/cpanel 6.4

cpanel/cpanel 6.4.1

cpanel/cpanel 6.4.2

cpanel/cpanel 6.4.2_stable_48

cpanel/cpanel 7.0

cpanel/cpanel 8.0

... and 2 more

Published Jun 20, 2005

Tracked Since Feb 18, 2026