CVE-2009-4823

MEDIO 4.3CVE-2009-4823 · Published 27/04/2010 · updated 16/06/2026

En resumen

CVE-2009-4823 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a cpanel (cpanel).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 77.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
cpanel cpanel	`= 11.0= 11.16= 11.18= 11.18.1= 11.18.2= 11.18.3= 11.18.4= 11.19.3= 11.21= 11.22= 11.22.1= 11.22.2= 11.22.3= 11.24= 11.24.7= 11.4.19`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter.

References

osvdb.org/61231
secunia.com/advisories/37826 · Vendor Advisory
cpanel.net/2009/12/cpanel-cross-site-scripting-vulnerability.html
exploit-db.com/exploits/10519 · Exploit
securityfocus.com/bid/37394
vupen.com/english/advisories/2009/3608 · Vendor Advisory

Más vulnerabilidades de cpanel

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cpanel

= 11.0= 11.16= 11.18= 11.18.1= 11.18.2= 11.18.3= 11.18.4= 11.19.3= 11.21= 11.22= 11.22.1= 11.22.2= 11.22.3= 11.24= 11.24.7= 11.4.19

No fix yet

Más vulnerabilidades de cpanel

Ver todo →