CVE-2004-2308

Vulnerability

A cross-site scripting (XSS) vulnerability exists in cPanel versions 9.1.0 and possibly earlier. The flaw resides in the dohtaccess.html page, specifically within the handling of the dir parameter, which fails to adequately sanitize user-supplied input, allowing for the injection of arbitrary web script or HTML [1].

Exploitation

An attacker can exploit this vulnerability by crafting a malicious URL that includes script or HTML code within the dir parameter of the dohtaccess.html page. For exploitation to be successful, the victim typically needs to be authenticated with valid credentials and interact with the crafted URL [1]. An example payload is http://www.example.com:2082/frontend/x/htaccess/dohtaccess.html?dir=> [1].

Impact

Successful exploitation allows an attacker to execute arbitrary HTML or script code within the context of the victim's browser. This can lead to the theft of cookie-based authentication credentials and potentially other malicious actions against the user [1].

Mitigation

No specific patched version or release date is mentioned in the available references. Users are advised to consult cPanel documentation or security advisories for information on available patches or workarounds. This vulnerability is not listed as being actively exploited in the wild or part of known exploited vulnerabilities.