Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Webmaster Level (SiteWorx) 3.0.2 (1) allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php; and allow remote authenticated users to inject arbitrary web script or HTML via the PATH_INFO to (2) siteworx.php, (3) users.php, (4) ftp.php, (5) mysql.php, (6) domains.php, (7) htaccess.php, (8) scriptworx.php, (9) stats.php, (10) backup.php, (11) restore.php, and (12) httpd.php; and unspecified vectors to (13) cron.php and (14) prefs.php.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://osvdb.org/36778 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securityfocus.com/bid/25451 | vdb-entry x_refsource_BID x_transferred |
| http://securityreason.com/securityalert/3070 | third-party-advisory x_refsource_SREASON x_transferred |
| http://interworx.com/forums/showthread.php?t=2501 | x_refsource_CONFIRM x_transferred |
| http://osvdb.org/36772 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36775 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36771 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36776 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36773 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36780 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36779 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36768 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36774 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.hackerscenter.com/archive/view.asp?id=27884 | x_refsource_MISC x_transferred |
| http://secunia.com/advisories/26586 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securityfocus.com/archive/1/477848/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://osvdb.org/36777 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36769 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/36767 | vdb-entry x_refsource_OSVDB x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/36300 | vdb-entry x_refsource_XF x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/36297 | vdb-entry x_refsource_XF x_transferred |
| http://osvdb.org/36770 | vdb-entry x_refsource_OSVDB x_transferred |