Other nomination

HostGator: cPanel Security Hole Exploited in Mass Hack

Rich Miller

Netcraft reports HostGator's September 2006 compromise via a then-unknown cPanel flaw giving root from any cPanel account, affecting every version and build. Attackers injected iframes into customer sites redirecting visitors to pages exploiting the unpatched IE VML hole, and the injections recurred after each cleanup until cPanel shipped a fix.

Record

Researcher

Rich Miller

In the archive

• Nominated for the 2006 Top 10 Web Hacking Techniques

Tags

• case-study
• privilege-escalation
• attack-chain
• iframe
• supply-chain
• cve
• owasp-a01-2021
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Rich Miller, first published at the original source. Preserved copies are kept so the citation survives its host.