EUVD-2018-13483

Malware in sbrugna...

CVE-2018-20945

bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...

CVE-2018-20949

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

cPanel Access Control Error Vulnerability (CNVD-2020-04081)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.27. No detailed vulnerability details are provided at this ti...

cPanel cross-site scripting vulnerability (CNVD-2019-29011)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Spamd Startup Config in versions prior to cPanel 68.0.27. The vulnerabilit...

cPanel Information Disclosure Vulnerability (CNVD-2019-29004)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A Competing Conditions Issue vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from improper...

cPanel Information Disclosure Vulnerability (CNVD-2019-29002)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel Information Disclosure Vulnerability (CNVD-2019-29000)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel Information Disclosure Vulnerability (CNVD-2019-29010)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel Information Disclosure Vulnerability (CNVD-2019-29001)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a configurati...

cPanel Authorization Issues Vulnerability (CNVD-2019-28996)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a lack of...

cPanel Cross-Site Scripting Vulnerability (CNVD-2019-26358)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM listips interface in versions prior to cPanel 68.0.27. The...

cPanel cross-site scripting vulnerability (CNVD-2019-26359)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 68.0.27, which stems from a lack of proper...

CVE-2018-20936

cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...

Authentication flaw

cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...

Design/Logic Flaw

cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20952

CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...

CVE-2018-20939

CVE-2018-20939 affects cPanel prior to 68.0.27 and causes information disclosure by enabling a user to discover contents of directories not owned by that user through backups. The root cause is an improper handling of backups that exposes directory listings, enabling partial confidentiality loss ...