Tool-29489

Overview 🔍:

• This tool is used to identify URLs with CVE-2023-29489 vulnerability.
• The tool uses payloads to identify the bug.
• Help menu of tool-29489:
  • python main.py [help] [URL] [inputfile] [outputfile]
  • -h or --help : To display help options.
  • -u or --url : To input URL to check.
  • -i or --input : To give the input file.
  • -o or --output : To give the output file.

About CVE-2023-29489 🔍:

• CVE Description:-

  • An issue was discovered in cPanel before 11.109.9999.116. Cross-site scripting can occur on the cpsrvd error page via an invalid webcall ID.

• Description:-

  • Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise users' interactions with a vulnerable application. It allows an attacker to circumvent the same origin policy, which is designed to segregate different websites from each other. Cross-site scripting vulnerabilities normally allow an attacker to masquerade as a victim user, carry out any actions that the user can perform, and access any of the user's data. If the victim user has privileged access within the application, then the attacker might gain full control over all of the application's functionality and data.