Collected research

HostGator: cPanel Security Hole Exploited in Mass Hack

Netcraft: HostGator: cPanel Security Hole Exploited in Mass Hack

Rich Miller · news.netcraft.com

Netcraft reports HostGator's September 2006 compromise via a then-unknown cPanel flaw giving root from any cPanel account, affecting every version and build. Attackers injected iframes into customer sites redirecting visitors to pages exploiting the unpatched IE VML hole, and the injections recurred after each cleanup until cPanel shipped a fix.

Record

Document

Netcraft: HostGator: cPanel Security Hole Exploited in Mass Hack

Researcher

Rich Miller

Published by

news.netcraft.com

Topic

Other

In the archive

• Collected in the 2006 research round

Tags

• case-study
• privilege-escalation
• attack-chain
• iframe
• supply-chain
• cve
• owasp-a01-2021
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Rich Miller, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.