CVE-2006-4293
cPanel 10 - Cross-Site Scripting via dir Parameter in dohtaccess.html or file Parameter in editit.html/showfile.html
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-4293. PoCs published by preth00nker.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in cPanel due to insufficient input sanitization. It includes a proof-of-concept URL demonstrating how arbitrary script code could be executed in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.
Exploits (3)
The provided text describes a cross-site scripting (XSS) vulnerability in cPanel due to insufficient input sanitization. It includes a proof-of-concept URL demonstrating how arbitrary script code could be executed in the context of the affected site.
The provided text describes a cross-site scripting (XSS) vulnerability in cPanel due to insufficient input sanitization. It includes a proof-of-concept URL demonstrating how arbitrary script code could be executed in the context of the affected site.
The provided text describes a cross-site scripting (XSS) vulnerability in cPanel due to insufficient input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.