Bugtraq mailing list archives

WHM Panel Mail Delivery Reports crash database Vulnerability


From: iedb.team () gmail com
Date: Sun, 13 Nov 2016 06:33:51 GMT

Mail Delivery Reports crash database  Local Vulnerability in WHM Panel All Version

###########################

# WHM Panel Mail Delivery Reports crash database Vulnerability

###########################

#####################################

#                 Iranian Exploit DataBase And Security Team - iedb.ir

# Title : WHM Panel Mail Delivery Reports crash database Vulnerability

# Vulnerability : Crash sendmail Database in whm panel

# Version : WHM 60.0 (build 17) 

# Local Vulnerability

# Method(s): POST

# pic : http://kkli.ir/C6LGY

# Author : IeDb.Ir

# Home : Www.IeDb.Ir - Www.IeDb.Ir/acc - xssed.Ir - kkli.ir

# Vulnerability attack information site and insert site sqli and xss bug : http://xssed.Ir

# iedb team Telegram : https://telegram.me/joinchat/BdNXvD3FrFLG8tVtIfTjaQ

# Email : iedb.team () gmail com

# Archive Exploit : http://iedb.ir/exploits-6209.html

#####################################

# Description:

Hello friends.
The vulnerability is local in both panel which makes crash the email database.


Enter the login panel
In the Email field, enter the Mail Delivery Reports in.
It can do a search on email.
In this field you can put your own code in the search field.
For example, I put this code:
<Script> alert ( 'Iedb.ir') </ script>
As you can see in the image below, email database has crashed.

http://kkli.ir/C6LGY


In this field, you can enter input other great causing the crash database.
This bug bugs for local and remote as it is written.
And this security problem exists in all versions of whm panel.
Other remote exploits and exploit this panel are private.


Thanks to all friends

#####################################

Tnks To : All Member In Iedb.ir And Iedb.ir/acc And Xssed.ir

#####################################

# Archive Exploit = http://iedb.ir/exploits-6209.html

#####################################

###########################

# Iranian Exploit DataBase = http://IeDb.Ir [2016-11-12]

###########################


Current thread: