Unscored severity · published Feb 12, 2007
CVE-2007-0890
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Webhost Manager · Cpanel
5.0; 5.3; 6.0; 6.2; 6.4; 6.4.1; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0890
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0890
changelog.cpanel.net
http://changelog.cpanel.net/index.cgi
osvdb.org
http://osvdb.org/32044
secunia.com
http://secunia.com/advisories/24106
www.securityfocus.com
http://www.securityfocus.com/archive/1/459585/100/0/threaded
Exploit
http://www.securityfocus.com/bid/22474
www.vupen.com
http://www.vupen.com/english/advisories/2007/0568
More from Webhost Manager
6.1
CVE-2012-6448
Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVE-2007-0854
Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code via a URL in the obj parameter
–
CVE-2006-6548
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the domain…
–
CVE-2006-6198
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email…