{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cSPAN class=\"textit\"\u003ecPanel\u003c/SPAN\u003e,  versions 5.x \u00e0 11.x.",
  "content": "## Description\n\nLe logiciel cPanel permet d\u0027administrer des applications \u00e0 distance.\n\nLa page dohtaccess.html re\u00e7oit un param\u00e8tre rurl dont le contenu n\u0027est\npas suffisament filtr\u00e9. Cette vuln\u00e9rabilit\u00e9 permet \u00e0 utilisateur\nmalveillant de r\u00e9aliser de l\u0027injection de code indirecte.\n\n## Solution\n\nUtiliser la version 11.17 build 19417 ou plus.\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-01-21T00:00:00",
  "last_revision_date": "2008-01-21T00:00:00",
  "links": [
    {
      "title": "Site de cPanel :",
      "url": "http://cpanel.com/"
    }
  ],
  "reference": "CERTA-2008-AVI-033",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-01-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 du logiciel \u003cspan class=\"textit\"\u003ecPanel\u003c/span\u003e permet\n\u00e0 utilisateur malveillant de r\u00e9aliser de l\u0027injection de code indirecte.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans cPanel",
  "vendor_advisories": []
}