<<< Date Index >>>     <<< Thread Index >>>

cPanel 11.x => List Directories and Folders



Hello,, 

I Discovered a new bug in cPanel to show the directions (Folders Only) on the 
server

in Disk Usage part

for example, I tried to see the folders in /etc

and it worked !

that would show you a list of directions of folders

and that including programes on the server, this could be dangerous !

the attacker may use the exploit to see programes on the server and find bugs 
for them 

also you may see the directions of backups in the server

also you have the permission to see the folders in other websites on the server 
which is been protected by firewall


tested on / cPanel version 11.18.3

to see more information & Exploits for this bug /

http://www.lezr.com/exploits/id/156

Discovered by Linux_Drox

Best Regards,,

L-G-H TEAM

LeZr.Com Group : The Arab Center For Pirates
www.LeZr.Com