CVE-2018-20886

CVE-2018-20886 affects cPanel prior to version 74.0.0, where phpMyAdmin session files are stored insecurely. The entry cites a storage flaw that can impact confidentiality, integrity, and availability at a partial level (local access required; low attack complexity). Exploitation status and speci...

CVE-2018-20885

cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation SEC-416...

CVE-2018-20885

CVE-2018-20885 affects cPanel prior to 74.0.0 and is caused by Apache HTTP Server configuration injection due to DocumentRoot variable interpolation (SEC-416). The available documents identify the affected product version and the vulnerability class but do not provide details on exploitation atte...

CVE-2018-20884

CVE-2018-20884 affects cPanel before 74.0.0; it describes a stored XSS in the WHM File Restoration interface (SEC-367). The connected sources corroborate the same description across multiple feeds (Red Hat, CNVD, NVD mirrors, CVE lists). No exploitation details or explicit remediation are provide...

CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

CVE-2018-20883

CVE-2018-20883 affects cPanel prior to 74.0.8, where FTP access could be possible during an account suspension (SEC-449). The connected documents confirm the issue title and affected product/version, but do not provide additional technical details, exploit status, or remediation specifics beyond ...

CVE-2018-20883

cPanel before 74.0.8 allows FTP access during account suspension SEC-449...

CVE-2018-20882

CVE-2018-20882 affects cPanel prior to 74.0.8, enabling arbitrary file-write under the root context during WHM Force Password Change (SEC-447). This is a local-attack vector impacting systems running affected cPanel versions. The vulnerability arises in the root context during the password-change...

CVE-2018-20882

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...

CVE-2018-20881

CVE-2018-20881 affects cPanel prior to 74.0.8, enabling self‑stored XSS on the Security Questions login page (SEC-446). Relevant content from connected sources confirms this is a client‑side script execution vulnerability in the web interface, with no explicit exploitation details provided in the...

CVE-2018-20881

cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...

CVE-2018-20880

cPanel before 74.0.8 mishandles account suspension because of an invalid emailaccounts.json file SEC-445...

CVE-2018-20880

CVE-2018-20880 affects cPanel before 74.0.8. The root cause is mishandling of account suspension due to an invalid email_accounts.json file (SEC-445). According to the CVE metrics, exploitation is local, with a low-base-impact on availability and no confidentiality/integrity impact, and a low ove...

CVE-2018-20879

Summary: CVE-2018-20879 affects cPanel prior to 74.0.8, where demo accounts could execute arbitrary code via the Fileman::viewfile API (SEC-444). The public records indicate an unknown root cause in Fileman::viewfile that enables code execution. The NVD/CVE entries provide a CVSSv3 base score of ...

CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

CVE-2018-20878

CVE-2018-20878 affects cPanel prior to 74.0.8, where a stored XSS vulnerability exists in the WHM “File and Directory Restoration” interface (SEC-441). The CNVD entry notes the issue stems from a lack of proper validation of client-side data in the WEB application. Connected records consistently ...

CVE-2018-20878

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...

CVE-2018-20877

CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20876

CVE-2018-20876 affects cPanel prior to version 74.0.8, where the Site Software Moderation interface is vulnerable to self XSS. The vulnerability arises from insufficient validation of client-side data in the web application, enabling execution of injected scripts in the context of the moderation ...