4122 matches found
CVE-2016-10785
CVE-2016-10785 affects cPanel prior to 60.0.25, where an attacker could disclose file contents during file copy operations (SEC-185). Root cause described as an information disclosure vulnerability in the file-copy process. The practical impact is information disclosure of file contents; exploita...
CVE-2016-10785
cPanel before 60.0.25 allows attackers to discover file contents during file copy operations SEC-185...
CVE-2016-10784
cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...
CVE-2016-10784
CVE-2016-10784 affects cPanel prior to 60.0.25, where the alias upload interface is vulnerable to self-XSS (SEC-184) due to insufficient input validation. The issue enables an attacker with access to the alias upload flow to inject and execute client-side code. The vulnerability was identified in...
CVE-2016-10783
cPanel before 60.0.25 allows self stored XSS in SSLlistkeys SEC-182...
CVE-2016-10783
CVE-2016-10783 affects cPanel before 60.0.25, where a self‑stored XSS is possible in SSL_listkeys due to insufficient validation in the web application. The vulnerability allows attacker‑controlled data to be stored and later reflected in the client, enabling cross‑site scripting. Affected produc...
CVE-2016-10782
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
CVE-2016-10782
CVE-2016-10782 affects cPanel versions prior to 60.0.25, with a self-stored XSS in the postgres API1 listdbs. The root cause is insufficient validation of client-side data in the web application, allowing injected scripts to run when listing databases. Impact: stored XSS in affected user sessions...
CVE-2016-10781
CVE-2016-10781 affects cPanel prior to 60.0.25, where the UI_confirm API is vulnerable to self-XSS due to insufficient validation of client-side data. The vulnerability can allow an attacker to execute client-side code via the UI_confirm interface, as described in the public records (SEC-180). Th...
CVE-2016-10781
cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...
CVE-2016-10780
cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...
CVE-2016-10780
CVE-2016-10780 affects cPanel prior to 60.0.25, where the ftp_sessions API is vulnerable to stored XSS due to insufficient validation of client data. The issue allows an attacker to inject and execute client-side script through the affected API, with impact described as a stored XSS condition. Ro...
CVE-2016-10779
CVE-2016-10779 affects cPanel prior to 60.0.25, with a stored XSS in api1_listautoresponders due to insufficient input validation in the web application. The vulnerability can lead to execution of client-side code in affected sessions. Remediation: upgrade to version 60.0.25 or later (as noted in...
CVE-2016-10779
cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...
CVE-2016-10777
cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...
CVE-2016-10777
Summary of CVE-2016-10777 : The vulnerability affects cPanel before 60.0.25 and is described as a self‑XSS in the WHM Tweak Settings for the parameter autodiscover_host (SEC-177). The issue originates from insufficient input handling in the affected web interface, enabling an attacker to cause cl...
CVE-2016-10778
CVE-2016-10778 affects cPanel before 60.0.25, with a stored XSS in the listftpstable API (SEC-178). The root cause cited is lack of proper validation of client data, enabling attacker-controlled scripts to execute in the victim’s browser. Consequences described are client-side code execution; no ...
CVE-2016-10778
cPanel before 60.0.25 allows self stored XSS in the listftpstable API SEC-178...
CVE-2016-10776
CVE-2016-10776 affects cPanel before 60.0.25, enabling stored XSS during the homedir removal phase of WHM Account termination (SEC-174). Root cause is improper handling/validation of user-supplied data in the web interface during account termination, allowing injected scripts to be stored and pot...