[Full-disclosure] Cpanel Admin login (username) Disclosure

[Sumit Siddharth <sumit.siddharth@xxxxxxxxx>]

Hi, could somebody kindly confirm this.
When a null username and a null password is provided in the cpanel
administration, port 2082, (basic authorization prompt) and then cancelling
the prompt the second time, the webpage presents a hyperlink to reset the
password which contains valid username for the cpanel administration.
Thanks
Sumit


--

Sumit Siddharth

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/