CVE		CVE-2007-0890
Статус		Candidate
Описание		Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.
Важность		Low
CVSS score		2,3
CVSS vector		(AV:R/AC:L/Au:NR/C:N/I:P/A:N/B:N)
Phase		Assigned (12.02.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-0890
References		BID : 22474
		BUGTRAQ : 20070208 local bug :[xxs] in whm
		FRSIRT : ADV-2007-0568
		MISC : http://changelog.cpanel.net/index.cgi
		SECUNIA : 24106
SecurityVulns:		Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )