Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel

nabopoll 1.1.2 sensitive file (admin without password)

Allons_voter Version 1.0  xss and admin votes

mcRefer SQL injection

From:	ali_(at)_hackerz.ir <ali_(at)_hackerz.ir>
Date:	11.02.2007
Subject:	local bug :[xxs] in whm

vendor : cpanel
version : all...
by : s3rv3r_hack3r
my-web-sitez : www.hackerz.ir - ali.hackerz.ir
exploit:
http://dpmaon.com:
2086/scripts/passwdmysql?password=[xss]&user=root&submit=Change+Password