4110 matches found
CVE-2016-10847
CVE-2016-10847 affects cPanel prior to 11.54.0.4. The vulnerability allows arbitrary file-read and file-write operations via the scripts/fixmailboxpath entry point (SEC-80). This could enable an attacker to read or write sensitive files on affected systems. Evidence from multiple sources confirms...
CVE-2016-10847
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
CVE-2016-10848
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck SEC-81...
CVE-2016-10848
CVE-2016-10848 affects cPanel prior to 11.54.0.4, allowing arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). The issue is documented across multiple sources (NVD, Red Hat advisory) with a high impact rating (C/V: high; A: high) and network attack vector. The provided materials d...
CVE-2016-10849
CVE-2016-10849 affects cPanel before 11.54.0.4, where file-chmod operations in scripts/secureit (SEC-82) can be abused. Connected documents confirm the affected product/version and the specific component (scripts/secureit) with an integrity impact (I:H in CVSS3) and a network vector with low atta...
CVE-2016-10849
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...
CVE-2018-20929
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint SEC-392...
CVE-2018-20929
CVE-2018-20929 affects cPanel prior to version 70.0.23. The vulnerability is an open redirect via the /unprotected/redirect.html endpoint (SEC-392). The available connected documents confirm the issue and its target endpoint but do not provide further technical details, impact, exploit status, or...
CVE-2018-20927
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing SEC-382...
CVE-2018-20927
CVE-2018-20927 (cPanel) affects cPanel prior to 70.0.23, where jailshell escape is possible due to incorrect crontab parsing (SEC-382). Exploitation is described as local (attack vector LOCAL) with LOW severity in CVSSv3 (3.8) and LOW in CVSSv2 (2.1). The root cause is mis-parsing of crontab entr...
CVE-2018-20926
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...
CVE-2018-20926
CVE-2018-20926 affects cPanel before 70.0.23 and allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). Red Hat notes the issue in cPanel prior to 70.0.23; CNVD/CVELIST entries confirm the same. Impact is local, with privileges elevated if exploited. Remediation is u...
CVE-2018-20925
CVE-2018-20925 affects cPanel prior to 70.0.23. It enables local privilege escalation via the WHM Legacy Language File Upload interface. Red Hat and CNVD entries corroborate the affected version range. Remediation: upgrade to 70.0.23 or later (fixed in 70.x releases).
CVE-2018-20925
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface SEC-379...
CVE-2018-20924
CVE-2018-20924 affects cPanel before 70.0.23, allowing arbitrary file-read and file-unlink via WHM style uploads (SEC-378). The issue concerns the vends/product: cPanel; vulnerable component/behavior: file access operations triggered by WHM uploads; root cause not explicitly detailed in the provi...
CVE-2018-20924
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...
CVE-2018-20918
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...
CVE-2018-20923
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action SEC-377...