4119 matches found
Code injection
cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler SEC-142...
Design/Logic Flaw
cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...
Design/Logic Flaw
cPanel before 58.0.4 has improper session handling for shared users SEC-139...
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...
Design/Logic Flaw
cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...
CVE-2016-10812
In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs SEC-117...
CVE-2016-10812
In CVE-2016-10812, cPanel versions before 57.9999.54 have a vulnerable component where /scripts/enablefileprotect exposes TTYs (SEC-117). Public references across multiple sources (NVD/NVD-derived and Red Hat/CVEs) confirm this exposure; CVSS metrics indicate high impact with network attack vecto...
CVE-2016-10811
CVE-2016-10811 affects cPanel prior to 57.9999.54, where the script /scripts/unsuspendacct exposes TTYs (SEC-116). The public description confirms the vulnerability is tied to this script, with high impact in both confidentiality, integrity, and availability (CVSSv3 8.8). Red Hat and CNVD referen...
CVE-2016-10811
In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...
CVE-2016-10810
Summary: CVE-2016-10810 affects cPanel prior to 57.9999.54, where the script /scripts/maildir_converter exposes a TTY to an unprivileged process (SEC‑115). The issue is documented across multiple sources (NVD entry and Red Hat, CNVD, etc.). Impact details: CVSS metrics in the NVD entry indicate a...
CVE-2016-10810
In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...
CVE-2016-10809
In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...
CVE-2016-10809
CVE-2016-10809 : In cPanel before 57.9999.54, the script path /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). This creates a high-risk exposure for confidentiality, integrity, and availability per the CVSS metrics, with an attack vector of network and low complexity. T...
CVE-2016-10808
CVE-2016-10808 affects cPanel prior to 57.9999.54. The endpoints /scripts/addpop and /scripts/delpop expose TTYs (SEC-113), enabling potential attacker access with high impact on confidentiality, integrity, and availability (CVSSv3 base score 8.8). No remediation details are provided in the suppl...
CVE-2016-10808
In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...
CVE-2016-10807
The CVE-2016-10807 entry affects cPanel prior to 57.9999.54. Affected component is the cPanel web management platform, with the root cause described as an input validation issue. Successful exploitation can lead to denial-of-service outcomes via the /scripts/killpvhost endpoint. Public references...
CVE-2016-10807
cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost SEC-112...
CVE-2016-10806
CVE-2016-10806 affects cPanel prior to 57.9999.54 and enables self XSS on the Paper Lantern Landing Page (SEC-110). The available documents consistently describe the issue as a self XSS vulnerability, with no explicit exploit details or additional impact described beyond what is stated. No remedi...