CVE-2005-2021: XSS
Published Jun 20, 2005
·Updated
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page.
Affected Software
12 affected components
Cpanel Cpanel=5.0
Cpanel Cpanel=5.3
Cpanel Cpanel=6.0
Cpanel Cpanel=6.2
Cpanel Cpanel=6.4
Cpanel Cpanel=6.4.1
Cpanel Cpanel=6.4.2
Cpanel Cpanel=6.4.2_stable_48
Cpanel Cpanel=7.0
Cpanel Cpanel=8.0
Cpanel Cpanel=9.0
Cpanel Cpanel=9.1
Event History
Jun 20, 2005
CVE Published
04:00 AM
Jun 21, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2021?
CVE-2005-2021 has a medium severity rating due to the potential for unauthorized access via cross-site scripting.
2
How do I fix CVE-2005-2021?
To fix CVE-2005-2021, upgrade cPanel to a version later than 9.1 that has addressed this vulnerability.
3
Who is affected by CVE-2005-2021?
CVE-2005-2021 affects cPanel versions 9.1 and earlier, as well as various earlier versions down to 5.0.
4
What type of attack does CVE-2005-2021 enable?
CVE-2005-2021 enables remote attackers to perform cross-site scripting (XSS) attacks.
5
What is the user parameter in the context of CVE-2005-2021?
In CVE-2005-2021, the user parameter on the cPanel login page is the vector exploited to inject arbitrary web scripts.