4117 matches found
CVE-2017-18412
CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...
CVE-2017-18411
The CVE-2017-18411 issue concerns cPanel’s addon domain conversion feature (pre-67.9999.103). The affected component is the addon domain conversion workflow, which can copy all MySQL databases to the newly created account, per SEC-285. The available documents describe the vulnerability impact as ...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18410
CVE-2017-18410 affects cPanel before 67.9999.103, where a user account’s backup archive could contain all MySQL databases on the server, exposing sensitive data. The vulnerability is disclosed across multiple sources (NVD, Red Hat, CNVD, CVE lists). Root cause details are not provided beyond the ...
CVE-2017-18410
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server SEC-284...
CVE-2017-18409
In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...
CVE-2017-18409
In this CVE, the affected software is cPanel prior to 67.9999.103. The backup interface could return a backup archive containing all MySQL databases (SEC-283), indicating an information disclosure vulnerability in the backup generation process. The available sources do not specify the exact root ...
CVE-2017-18408
CVE-2017-18408 affects cPanel before 67.9999.103, exposing a stored XSS vulnerability in the WHM MySQL Password Change interfaces (SEC-282). Multiple sources confirm the issue and reference the same remediation version 67.9999.103. The root cause is described in CNVD-2019-30473 as inadequate vali...
CVE-2017-18408
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...
CVE-2017-18407
CVE-2017-18407 affects cPanel before 67.9999.103, where SSL hostname verification is not enforced for the support‑agreement download (SEC-279). This is the concrete vulnerability described across multiple connected records. The available documents do not provide exploit details, impact specifics ...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18406
cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...
CVE-2017-18406
CVE-2017-18406 affects cPanel prior to 67.9999.103, where eximstats processing allows SQL injection due to lack of input validation of external SQL statements in database-based components. The issue is documented across multiple sources (e.g., Red Hat, CNVD, NVD); CVSS3 base score is 7.5 (HIGH) w...
CVE-2017-18385
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18390
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18389
cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...
CVE-2017-18388
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...