NVD

Id
2005  
Name
CVE-2008-2070  
Description
The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "<" and ">" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-05-12  
Modified Date
2011-03-07  
Seq
2008-2070  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12867 2005 CVE-2008-2070 http://changelog.cpanel.net/?revision=0;tree=;treeview=;show=html;pp=25;te=1314;pg=2  View
12868 2005 CVE-2008-2070 20080509 XSS and CSRF vulnerability on cPanel 11  View
12869 2005 CVE-2008-2070 3866  View
12870 2005 CVE-2008-2070 20080509 XSS and CSRF vulnerability on Cpanel 11  View
12871 2005 CVE-2008-2070 29125  View
12872 2005 CVE-2008-2070 ADV-2008-1522  View
12873 2005 CVE-2008-2070 cpanel-whminterface-xss(42305)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47722 JVNDB-2008-003032 cPanel の WHM インターフェースにおける任意の Web スクリプトを挿入される脆弱性 cPanel の WHM インターフェースには、XSS 保護を回避され、任意の Web スクリプトまたは HTML を挿入される脆弱性が存在します。 CVE-2008-2070 32183 CVE-2008-2070 2005 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003032.html 2008-05-12 2012-06-26 View