CVE-2016-10858

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...

CVE-2016-10858

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...

CVE-2018-20901

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

Security feature bypass

cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...

Design/Logic Flaw

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation SEC-408...

Design/Logic Flaw

cPanel before 71.9980.37 does not enforce the Mime::listhotlinks API feature restriction SEC-432...

Design/Logic Flaw

cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via getinformationforapplications CPANEL-1221...

Design/Logic Flaw

cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi SEC-364...

Design/Logic Flaw

cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...

Information disclosure

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...

Code injection

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...

Design/Logic Flaw

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

Cross site scripting

cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

Command injection

In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files SEC-368...

Design/Logic Flaw

cPanel before 70.0.23 allows any user to disable Solr SEC-371...

Code injection

cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...

Design/Logic Flaw

cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...