3 ms·
cPanel uses CentOS and does system upgrades ala yum update. Dunno if that is on by default or not though. But you aren't going to get into its cgi interface w
by ck2 12y ago
cPanel uses CentOS and does system upgrades ala yum update.
Dunno if that is on by default or not though.
But you aren't going to get into its cgi interface without login so that would have to be cracked first.
- r1ch 12y agoHmm, it's been a while since I last touched cPanel (almost 10 years), but I recall it automatically included aliases for cgi scripts into each vhost. Try /cgi-sys/guestbook.cgi on any cPanel website for example (a random Google example: https://www.vidahost.com/cgi-sys/guestbook.cgi https://www.vidahost.com/cgi-sys/guestbook.cgi)
- pbhjpbhj 12y agoBut it seems you only need one login to compromise the whole server. If I buy $3 hosting on a shared server then I can pwn the whole server can't I (using cPanel to escalate an attack above my privelege level)? What are the chances that one user account on a shared server is crackable, pretty high I'd imagine.