----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Lpanel Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA15589

VERIFY ADVISORY:
http://secunia.com/advisories/15589/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting, Manipulation of data, Exposure of sensitive
information

WHERE:
>From remote

SOFTWARE:
Lpanel 1.x
http://secunia.com/product/5215/

DESCRIPTION:
Zackarin Smitz has reported some vulnerabilities in Lpanel, which can
be exploited by malicious users to disclose and manipulate sensitive
information, and by malicious people to conduct cross-site scripting
attacks.

1) Input passed to the "domain" field in "diagnose.php" isn't
properly verified for the current user. This can be exploited to
reset the DNS setting for arbitrary domains.

Successful exploitation requires user to be authenticated.

2) Input passed to the "close", "open" and "pid" parameters in
"view_ticket.php" isn't properly verified for the current user. This
can be exploited to close, open and respond to the support ticket for
arbitrary owners.

Successful exploitation requires user to be authenticated.

3) Input passed to the "pid" parameter in "view_ticket.php" isn't
properly sanitised before being returned to the user. This can be
exploited to execute arbitrary HTML and script code in a user's
browser session in context of a vulnerable site.

4) Input passed to the "inv" parameter in "viewreceipt.php" isn't
properly verified for the current user. This can be exploited to
disclose the details of arbitrary invoices.

Successful exploitation requires user to be authenticated.

5) Input passed to the "editdomain" parameter in "domains.php" isn't
properly verified for the current user. This can be exploited to
manipulate the DNS information for arbitrary clients.

Successful exploitation requires user to be authenticated.

The vulnerabilities have been reported in version 1.59 and prior.
Other versions may also be affected.

SOLUTION:
Grant only trusted users access.

PROVIDED AND/OR DISCOVERED BY:
Zackarin Smitz

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------