CVE-2008-0370

MEDIUM 4.3CVE-2008-0370 · Published 22/01/2008 · updated 16/06/2026

In short

CVE-2008-0370 is a MEDIUM (CVSS 4.3) vulnerability affecting cpanel (cpanel).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cpanel cpanel	`= 11.16`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary web script or HTML via the rurl parameter. NOTE: some of these details are obtained from third party information.

References

aria-security.net/forum/showthread.php
secunia.com/advisories/28561
securityreason.com/securityalert/3561
securityfocus.com/archive/1/486404/100/0/threaded
securityfocus.com/bid/27308

More vulnerabilities in cpanel

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free