CVE-2017-18442

CVE-2017-18442 : Affected software is cPanel prior to 64.0.21. The issue allows demo accounts to trigger Cpanel::SPFUI API commands (SEC-246), implying limited privilege elevation within the control panel API. The description and connected documents do not provide additional exploitation details ...

CVE-2017-18442: Improper Neutralization of Special Elements used in a Command

cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...

PT-2019-8377

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows demo accounts to execute Cpanel::SPFUI API commands. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...