?? ????? ??????? ?????? ???? ???? ????? ?????????? ?? ????? CVE-2023-29489 ?? cPanel ?? ?? ??? ????? ????? ??? ??????? ?? (web hosting control panel) ??? ? ?? ??? ?????? ?? ????? ??????? ????? ???? ??????? ??? ???. ??? ?????????? ????? ????? XSS ?????? (reflected cross-site scripting) ?? ???? ??? ???? ????? ???? ?? ???????? ????????? cPanel ????? ???????. ?????????? XSS ??? ??? ?? ????? ???????? ?????? (????? ????? ????? ???? ? …) cPanel ?? ???? ????? ?? ???? ??? ???? ???????? ?? ???? ???? ??????????? ???. ?? ???????? ????? ?? ???? ?? ? ??? ??? ?? ???? ??????? ?? cPanel ?? ????? XSS ????????? ????? ? ?????? ?? ????????? /cpanelwebcall/ ?? ??? ??????? (?? ? ???) ?????????? ??? ???? ???? ????? ?? ???????? ?????? cPanel ?????? ??????. ?? ???? ????? ?? ????? ?? ???? ???????? ?? ???????? ?????? cPanel? ???? ?? ??????????? ?? ??? ???????? ?? ? ??? ?? ??? ???? ????? ??? ???? ???. ?? ???? ?? ??? ?? ???????? ?????? cPanel ?? ????? ??? ???? ????????? ?????? ?? ????? ???????? ?? ??? ?????????? ???? ????? ???? cPanel ?? ????? ????????? ??? ??????? ???.
?? ?? ???? ? ????? ???????? ??? ?? ???? (WebHost Manager (WHM)) ???? ????? ????? ????? ???? ? … ?? ???? ????? ??????? ??????? ?? ??? ?????????? ??????????? ????.
?????????/????? ??? ?????
??? ?????????? cPanel ???????? ??? ?? ??????????????? ?? ??? ????? ???? ??????.
??? ????? ????
???????? ????????? ??????????? ? ?????? ??????????? ?????? ???? ???.
????? ???
[?] https://nvd.nist.gov/vuln/detail/CVE-2023-29489
[?] https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/
???? : ???? ????
