4.3

CVE-2007-0890

Exploit
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cpanel ≫ Webhost Manager Version 5.0
Cpanel ≫ Webhost Manager Version 5.3
Cpanel ≫ Webhost Manager Version 6.0
Cpanel ≫ Webhost Manager Version 6.2
Cpanel ≫ Webhost Manager Version 6.4
Cpanel ≫ Webhost Manager Version 6.4.1
Cpanel ≫ Webhost Manager Version 6.4.2
Cpanel ≫ Webhost Manager Version 6.4.2_stable_48
Cpanel ≫ Webhost Manager Version 7.0
Cpanel ≫ Webhost Manager Version 8.0
Cpanel ≫ Webhost Manager Version 9.0
Cpanel ≫ Webhost Manager Version 9.1
Cpanel ≫ Webhost Manager Version 9.1.0_r85
Cpanel ≫ Webhost Manager Version 9.4.1_r64
Cpanel ≫ Webhost Manager Version 9.9.1_r3
Cpanel ≫ Webhost Manager Version 10.2.0_r82
Cpanel ≫ Webhost Manager Version 10.6.0_r137
Cpanel ≫ Webhost Manager Version 10.8.1_113
Cpanel ≫ Webhost Manager Version 10.8.1_build84
Cpanel ≫ Webhost Manager Version 10.8.2_118
Cpanel ≫ Webhost Manager Version 10.9
Cpanel ≫ Webhost Manager Version 11
Cpanel ≫ Webhost Manager Version 11.0
Cpanel ≫ Webhost Manager Version 11_beta
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.77% 0.752
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://changelog.cpanel.net/index.cgi
http://osvdb.org/32044
http://secunia.com/advisories/24106
http://www.securityfocus.com/archive/1/459585/100/0/threaded
http://www.securityfocus.com/bid/22474
Exploit
http://www.vupen.com/english/advisories/2007/0568