Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
cPanel 跨站脚本漏洞
Vulnerability Description
cPanel是美国cPanel公司的一套基于Web的主机控制管理系统。该管理系统主要用于自动化控制网站和服务器。 cPanel 74及之前版本中存在跨站脚本漏洞，该漏洞源于程序在frontend/THEME/raw/index.html渲染过程中错误地处理文件名。远程攻击者可借助特制的文件名利用该漏洞注入任意的Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A