4118 matches found
cPanel Authorization Issues Vulnerability (CNVD-2019-29619)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker could exploit the vulnerability to...
cPanel Information Disclosure Vulnerability (CNVD-2019-29721)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 57.9999.54. An attacker can exploit the vulnerability to read user lo...
cPanel cross-site scripting vulnerability (CNVD-2019-26166)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 74.0.8. The vulnerability stems from a lack of proper...
cPanel Information Disclosure Vulnerability (CNVD-2019-29719)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.27. An attacker can exploit this vulnerability to perform...
cPanel Cross-Site Scripting Vulnerability (CNVD-2019-26361)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of...
cPanel cross-site scripting vulnerability (CNVD-2019-26199)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...
cPanel Cross-Site Scripting Vulnerability (CNVD-2019-26358)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM listips interface in versions prior to cPanel 68.0.27. The...
cPanel SQL Injection Vulnerability (CNVD-2019-26351)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18460
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation SEC-221...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18463
cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path SEC-225...
CVE-2017-18463
cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path SEC-225...
CVE-2017-18460
cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation SEC-221...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18452
cPanel before 64.0.21 allows code execution via Rails configuration files SEC-259...
CVE-2017-18451
cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade SEC-257...
CVE-2017-18459
cPanel before 62.0.17 allows arbitrary code execution during account modification SEC-220...