CVE-2023-29489
MEDIUM NUCLEIcPanel < 11.102.0.31 - Cross-Site Scripting via Invalid Webcall ID
Title source: llmExploitation Summary
EIP tracks 19 public exploits for CVE-2023-29489. PoCs published by 0-d3y, whalebone7, mdaseem03. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python-based scanner for CVE-2023-29489, an XSS vulnerability in cPanel. The script automates the detection of vulnerable hosts by injecting an XSS payload and checking for its execution.
Description
An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.
Exploits (19)
This repository contains a Python-based scanner for CVE-2023-29489, an XSS vulnerability in cPanel. The script automates the detection of vulnerable hosts by injecting an XSS payload and checking for its execution.
The repository provides a Bash script (`ee.sh`) that automates the detection of XSS vulnerabilities by analyzing screenshots taken by HTTPX for the presence of a specified keyword (e.g., an XSS payload). It uses Tesseract OCR to extract text from screenshots and filters URLs where the keyword is found.
This repository contains a Python-based scanner for detecting CVE-2023-29489, an XSS vulnerability in cPanel. It includes functionality for scanning single or multiple URLs, logging results, and sending Telegram notifications.
The repository contains only a README.md file with a placeholder for an XSS payload related to CVE-2023-29489 in cPanel, but no actual exploit code or details are provided.
This repository contains a Python-based scanner for detecting CVE-2023-29489, an XSS vulnerability in cPanel's webcall feature. It uses Selenium to automate browser interactions and check for vulnerability by injecting an XSS payload.
This script scans for CVE-2023-29489, a reflected XSS vulnerability in cPanel, by leveraging Shodan to find cPanel hosts and testing them with a crafted payload. It checks for the presence of the injected XSS payload in the response.
This repository contains a Python-based scanner for detecting CVE-2023-29489, an XSS vulnerability in cPanel. The tool checks for the presence of the vulnerability by sending crafted requests to a list of target websites and logs vulnerable URLs.
This repository contains a Python-based scanner for detecting CVE-2023-29489, a vulnerability in an unspecified target software. The tool checks for the presence of a specific error message in HTTP responses to identify vulnerable endpoints.
This repository contains a Python-based scanner for detecting CVE-2023-29489, a reflected XSS vulnerability in cPanel. The tool checks for the presence of the vulnerability by sending crafted requests and analyzing responses for the XSS payload.
This script scans a list of websites for CVE-2023-29489, an XSS vulnerability in cPanel's webcall endpoint. It checks for the presence of an HTTP 400 error and logs vulnerable targets.
This repository contains a Python-based scanner tool designed to detect CVE-2023-29489, an XSS vulnerability in cPanel before 11.109.9999.116. The tool sends HTTP requests with a specific payload to check for the presence of the vulnerability.
This repository contains a scanner for CVE-2023-29489, which targets a reflected XSS vulnerability in cPanel. The script uses Selenium to automate browser interactions and checks for the presence of a specific alert text to determine vulnerability.
This repository contains a Python-based scanner for CVE-2023-29489, which checks for the presence of a reflected XSS vulnerability in cPanel's webcall endpoint. It reads a list of target URLs, tests each for vulnerability, and logs vulnerable endpoints to a file.
This repository contains a Python script that exploits CVE-2023-29489, a reflected XSS vulnerability in cPanel versions 11.102.0.x < 11.102.0.31, 11.106.0.x < 11.106.0.x, 11.108.0.x < 11.108.0.13, and 11.109.9999.x < 11.109.9999.116. The script generates a malicious payload to trigger the XSS via a crafted web call ID request.
This script scans for CVE-2023-29489, a reflected XSS vulnerability in cPanel, by leveraging Shodan to find cPanel hosts and testing them with a crafted payload. It checks for the presence of an injected img tag with an onerror handler.
This script is a mass scanner for CVE-2023-29489, which exploits an XSS vulnerability in cPanel by injecting an img tag with an onerror event. It checks if the target is vulnerable by verifying the presence of the injected payload in the response.
This YAML file is a Nuclei template designed to detect CVE-2023-29489, a reflected XSS vulnerability in cPanel. It sends a crafted GET request to the vulnerable endpoint and checks for the presence of the injected payload in the response.
This YAML file is a Nuclei template designed to detect the presence of CVE-2023-29489, a reflected XSS vulnerability in cPanel. It sends a crafted GET request to the target URL and checks for the presence of the injected payload in the response.
Nuclei Templates (1)
title:"cPanel" || http.title:"cpanel" || cpe:"cpe:2.3:a:cpanel:cpanel" || http.title:"cpanel - api codes"
title="cpanel - api codes" || title="cpanel"
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L