CVE-2017-18466

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

Design/Logic Flaw

cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...

Design/Logic Flaw

cPanel before 62.0.17 does not have a sufficient list of reserved usernames SEC-227...

Design/Logic Flaw

cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error SEC-229...

Code injection

cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...

Code injection

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

Design/Logic Flaw

cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...

CVE-2017-18468

CVE-2017-18468 affects cPanel prior to 62.0.17. The vulnerability arises in the Htaccess::setphppreference API (SEC-232), enabling code execution by demo accounts. No exploitation details are provided in the documents. Affected software: cPanel before 62.0.17. Impact: remote code execution by una...

CVE-2017-18468

cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...

CVE-2017-18467

cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error SEC-229...

CVE-2017-18467

CVE-2017-18467 affects cPanel prior to version 62.0.17. A URL filtering error (SEC-229) allows access to restricted resources. The core issue is a URL filtering flaw in the affected path, enabling unintended resource access. Remediation: upgrade to at least 62.0.17 (as indicated by the CVE descri...

CVE-2017-18465

cPanel before 62.0.17 does not have a sufficient list of reserved usernames SEC-227...

CVE-2017-18465

CVE-2017-18465 : cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). This is reported consistently across sources (NVD, Red Hat, CNVD, etc.). The materials provided do not specify any affected subcomponents beyond the version, exploitation details, or a publishe...

CVE-2017-18466

CVE-2017-18466 affects cPanel prior to 62.0.17. The issue is that the system does not properly recognize domain ownership when adding parked domains to a mail configuration (SEC-228). Affected product/version: cPanel before 62.0.17. Description across connected sources reiterates the same vulnera...

CVE-2017-18466

cPanel before 62.0.17 does not properly recognize domain ownership during addition of parked domains to a mail configuration SEC-228...

CVE-2017-18464

CVE-2017-18464 affects cPanel before 62.0.17. The vulnerability arises in the WHM Zone Template editor (SEC-226), allowing arbitrary file overwrite due to insufficient input validation. Impact stated as potential for unauthorized file modification. The Red Hat and other sources confirm the same d...

CVE-2017-18464

cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...

CVE-2017-18462

cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...

CVE-2017-18462

cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP-based protection is enabled (SEC-224). The issue is documented across multiple sources as a vulnerability in cPanel up to version 62.0.16, with the fix in 62.0.17 identified. Root cause details are not elaborated in the provided doc...

cPanel Information Disclosure Vulnerability (CNVD-2019-29722)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 57.9999.54. An attacker can exploit this vulnerability to perform...