Secunia

Sullo has reported multiple vulnerabilities in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks.

User input passed to various parameters isn't sanitised sufficiently before being returned to the user. This can be exploited to execute arbitrary HTML or script code in a user's browser session in context of an affected site by tricking the user into visiting a malicious website or follow a specially crafted link.

The following parameters are affected:
1) The "account" parameter in "cpanelpro/ignorelist.html".
2) The "account" parameter in "cpanelpro/showlog.html".
3) The "db" parameter in "sql/repairdb.html".
4) The "login" parameter in "ftp/doaddftp.html".
5) The "account" parameter in "cpanelpro/editmsg.html".
6) The "email" parameter in "testfile.html".
7) The "file" parameter in "err/erredit.html".
8) The "dns" parameter in "net/dnslook.html".
9) The "ip" parameter in "denyip/del.html".
10) The "dir" parameter in "htaccess/index.html".

The vulnerabilities have been reported in version 9.1.0-R85. Other versions may also be affected.

Solution
The vulnerabilities will reportedly be fixed in the April 1, 2004 EDGE release.
Further details available in Customer Area

Provided and/or discovered by
Sullo

Original Advisory
http://www.cirt.net/advisories/cpanel_xss.shtml

Deep Links
Links available in Customer Area