CVE-2004-1875

KRITISCH 9.3CVE-2004-1875 · Published 30/03/2004 · updated 16/06/2026

Kurz gesagt

CVE-2004-1875 ist eine Schwachstelle (KRITISCH (CVSS 9.3)) in cpanel (cpanel).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.6%, höher als bei 91.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
cpanel cpanel	`= 9.1.0_r85`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html. NOTE: the dnslook.html vector was later reported to exist in cPanel 10.

References

marc.info
secunia.com/advisories/11244 · Patch
secunia.com/advisories/22984 · Vendor Advisory
aria-security.com/forum/showthread.php
cirt.net/advisories/cpanel_xss.shtml · Patch
osvdb.org/4208 · Vendor Advisory
osvdb.org/4209 · Vendor Advisory
osvdb.org/4210 · Vendor Advisory
osvdb.org/4211
osvdb.org/4212 · Vendor Advisory
osvdb.org/4213 · Vendor Advisory
osvdb.org/4214 · Vendor Advisory
osvdb.org/4215 · Vendor Advisory
osvdb.org/4243 · Vendor Advisory
securityfocus.com/bid/10002 · Vendor Advisory
securityfocus.com/bid/21142

Weitere Schwachstellen in cpanel

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cpanel

= 9.1.0_r85

No fix yet

Description

Weitere Schwachstellen in cpanel

Alle anzeigen →