CVE-2008-0370: Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remot...

Security readout for executives and security teams

This is an old cross-site scripting issue in cPanel's dohtaccess.html page. A remote attacker could inject script or HTML through the rurl parameter. Business concern is mainly legacy hosting control panels: if an affected cPanel version remains exposed, user sessions or control-panel actions may be at risk. Exposure is limited to environments running cPanel before 11.17 build 19417, especially internet-accessible hosting management interfaces. The source bundle's affected product fields are incomplete, so asset validation should rely on installed cPanel version and deployed control-panel routes. Treat this as a legacy exposure check, not an emergency based on available evidence. Prioritize if old cPanel systems still host sensitive accounts or remain internet-accessible. No active exploitation is supported by the supplied sources. Mitigation focus: Confirm cPanel is not before 11.17 build 19417.; Check current cPanel vendor guidance for supported upgrade paths.; Restrict access to cPanel management interfaces where operationally possible..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.