CVE-2007-3366: XSS

Q: What is the severity of CVE-2007-3366?

CVE-2007-3366 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.

Q: How do I fix CVE-2007-3366?

To fix CVE-2007-3366, update cPanel to version 11.4.19-R14378 or higher.

Q: What systems are affected by CVE-2007-3366?

CVE-2007-3366 affects cPanel versions prior to 10.9.1 and 11.x versions before 11.4.19-R14378.

Q: What type of vulnerability is CVE-2007-3366?

CVE-2007-3366 is a cross-site scripting (XSS) vulnerability.

Q: Can CVE-2007-3366 lead to data theft?

Yes, CVE-2007-3366 can lead to data theft by allowing attackers to inject malicious scripts into web pages.

Published Jun 22, 2007

Updated

Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

2 affected components

Cpanel Cpanel<=11.4.19

Cpanel Cpanel<=10.9.0_build_10300

Remediation

Patch Available

http://secunia.com/advisories/25722

Event History

Jun 22, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3366?

CVE-2007-3366 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2007-3366?