EUVD-2018-13402

Malware in sbrugna...

CVE-2018-20867

cPanel before 76.0.8 has an open redirect when resetting connections SEC-462...

cPanel Information Disclosure Vulnerability (CNVD-2019-29720)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 76.0.8. No detailed vulnerability details are provided at this tim...

cPanel Input Validation Error Vulnerability (CNVD-2019-29616)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 76.0.8. No detailed vulnerability details are provided at this tim...

cPanel cross-site scripting vulnerability (CNVD-2019-26364)

cPanel is a set of the most prestigious commercial software in the web hosting industry, which is based on Linux and BSD system, developed in PHP and closed-source software in nature, providing powerful and quite complete hosting management functions. A stored cross-site scripting vulnerability...

cPanel cross-site scripting vulnerability (CNVD-2019-26355)

cPanel is a set of the most prestigious commercial software in the web hosting industry, which is based on Linux and BSD system, developed in PHP and closed-source software in nature, providing powerful and quite complete hosting management functions. A stored cross-site scripting vulnerability...

Design/Logic Flaw

The WebDAV transport feature in cPanel before 76.0.8 enables debug logging SEC-467...

CVE-2018-20868

cPanel before 76.0.8 contains a Stored XSS in the WHM MultiPHP Manager interface (SEC-464). Affected product: cPanel/WHM (MultiPHP Manager); vulnerable component: stored XSS in the interface. Root cause: vulnerability described as Stored XSS; the exact exploit details are not provided in the docu...

CVE-2018-20864

CVE-2018-20864 affects cPanel before 76.0.8. The vulnerability allows a persistent Virtual FTP account after removal of its associated domain (SEC-454). Public details in connected sources describe the affected product and the outcome, but do not provide explicit root-cause analysis or remediatio...

CVE-2018-20867

cPanel before 76.0.8 has an open redirect when resetting connections SEC-462...