Aria-Security Team have reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to the "rurl" parameter in dohtaccess.html is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Successful exploitation requires that the target user has valid user credentials.

The vulnerability is reported in all versions prior to 11.17 with build IDs less than 19417.

Solution
Update to version 11.17 with build ID 19417 or higher.

Provided and/or discovered by
Aria-Security Team

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://aria-security.net/forum/showthread.php?p=1238

Deep Links
Links available to Secunia VIM customers