Unrated severityNVD Advisory· Published Apr 27, 2010· Updated Jun 16, 2026
CVE-2009-4823
CVE-2009-4823
Description
Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18cpe:2.3:a:cpanel:cpanel:11.0:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:cpanel:cpanel:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.16:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.18:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.18.1:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.18.2:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.18.4:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.19.3:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.21:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.21:beta:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.22:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.22.1:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.22.2:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.22.3:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.24:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.24.7:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:11.4.19:*:*:*:*:*:*:*
- (no CPE)range: 11.0 - 11.24.7
Patches
Vulnerability mechanics
References
6- www.exploit-db.com/exploits/10519nvdExploit
- secunia.com/advisories/37826nvdVendor Advisory
- www.vupen.com/english/advisories/2009/3608nvdVendor Advisory
- osvdb.org/61231nvd
- www.cpanel.net/2009/12/cpanel-cross-site-scripting-vulnerability.htmlnvd
- www.securityfocus.com/bid/37394nvd
News mentions
0No linked articles in our index yet.