4107 matches found
Sql injection
cPanel before 74.0.0 allows SQL injection during database backups SEC-420...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
Authentication flaw
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
Security feature bypass
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
Design/Logic Flaw
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
Design/Logic Flaw
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts SEC-393...
Design/Logic Flaw
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...
Design/Logic Flaw
cPanel before 74.0.0 insecurely stores phpMyAdmin session files SEC-418...
Design/Logic Flaw
cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
CVE-2018-20900
CVE-2018-20900 affects cPanel prior to 71.9980.37, where stored XSS exists in the YUM autorepair functionality (SEC-399). The issue, described in multiple sources (NVD/RH data), indicates an XSS vulnerability that could be triggered via the affected YUM autorepair path. The fixed version is 71.99...
CVE-2018-20900
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...
CVE-2018-20899
CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20898
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
CVE-2018-20898
CVE-2018-20898 affects cPanel before 71.9980.37, where e-mail injection is possible during cPAddons moderation (SEC-396). Multiple connected records (NVD, Red Hat, PRION) corroborate the vendor-facing nature of the issue and the same description. The available documents do not provide exploit cod...
CVE-2018-20897
CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...