CVE-2004-2308

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html.

Affected (12)

Products: Cpanel: Cpanel

Cpanel

1 product

Cpanel

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Cpanel Cpanel	Version 5.0
Cpanel Cpanel	Version 5.3
Cpanel Cpanel	Version 6.0
Cpanel Cpanel	Version 6.2
Cpanel Cpanel	Version 6.4.1
Cpanel Cpanel	Version 6.4.2
Cpanel Cpanel	Version 6.4.2_stable_48
Cpanel Cpanel	Version 6.4
Cpanel Cpanel	Version 7.0
Cpanel Cpanel	Version 8.0
Cpanel Cpanel	Version 9.0
Cpanel Cpanel	Version 9.1