Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: cPanel 10 File Editing Vulnerability
From: Andrew Farmer <andfarm () gmail com>
Date: Sat, 4 Feb 2006 16:51:00 -0800

On 04 Feb 06, at 09:16, Shell wrote:
In cPanel 10, the script "erredit.html," which is supposed to edit a specific set of files, can edit any file acessible by the cPanel.

http://www.example.com:2082/frontend/x/err/erredit.html? dir=public_html/&file=index.php

Tested on a real cPanel system running cPanel 10.8.1-RELEASE. This won't edit files outside the user's home directory, even with traversal paths, and deletes files before writing them - this doesn't appear exploitable; indeed, it doesn't seem to be much except a weird way of editing your own files.

Attachment: PGP.sig
Description: This is a digitally signed message part

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]