CVE-2004-1875

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-03-30 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html. NOTE: the dnslook.html vector was later reported to exist in cPanel 10.

Affected products

WebPros cPanel: 9.1.0_r85

References

http://marc.info/?l=bugtraq&m=108066561608676&w=2
http://secunia.com/advisories/11244
http://secunia.com/advisories/22984
http://www.aria-security.com/forum/showthread.php?t=30
http://www.cirt.net/advisories/cpanel_xss.shtml
http://www.osvdb.org/4208
http://www.osvdb.org/4209
http://www.osvdb.org/4210
http://www.osvdb.org/4211
http://www.osvdb.org/4212
http://www.osvdb.org/4213
http://www.osvdb.org/4214

Get alerted when CVE-2004-1875 or the next vulnerability affects your stack