Cpanel Exploit?

[tlingit]

Is there any information on this Russian fellow who seems to have come up with a Cpanel exploit? He apparently can place an inline tag in any html file and not sure what the exploit makes possible.
I have noticed http://step57.info and http://zbzppbwqmm.biz showing up in the status bar of certain windows. the latter URL really hangs up some windows loading.

[MMarko]

On properly secured server this exploit is useless.

First of all, disable exec() in php.ini

Then secure /tmp



After all, this exploit retrieves md5 password hash which is again useless (IMHO) if it is good password.

Nothing to worry about, imho.