4107 matches found
CVE-2018-20862
cPanel before 76.0.8 unsafely performs PostgreSQL password changes SEC-366...
CVE-2018-20868
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...
CVE-2018-20868
cPanel before 76.0.8 contains a Stored XSS in the WHM MultiPHP Manager interface (SEC-464). Affected product: cPanel/WHM (MultiPHP Manager); vulnerable component: stored XSS in the interface. Root cause: vulnerability described as Stored XSS; the exact exploit details are not provided in the docu...
CVE-2018-20866
cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature SEC-461...
CVE-2018-20866
CVE-2018-20866 affects cPanel before 76.0.8, with a Stored XSS in the WHM “Reset a DNS Zone” feature (SEC-461). The vulnerability concerns the handling of input in Reset DNS Zone, enabling stored cross-site scripting. Documents consistently describe the issue as a stored XSS vulnerability in that...
CVE-2018-20865
CVE-2018-20865 affects cPanel prior to 76.0.8, where a Self XSS flaw exists in the WHM Addtional Backup Destination field (SEC-459). Exploitation context is not detailed in the provided documents, but the vulnerability is tied to user-supplied content in the WHM backup destination setting, enabli...
CVE-2018-20865
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...
CVE-2018-20864
CVE-2018-20864 affects cPanel before 76.0.8. The vulnerability allows a persistent Virtual FTP account after removal of its associated domain (SEC-454). Public details in connected sources describe the affected product and the outcome, but do not provide explicit root-cause analysis or remediatio...
CVE-2018-20864
cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain SEC-454...
CVE-2018-20863
cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments SEC-452...
CVE-2018-20863
CVE-2018-20863 affects cPanel prior to 76.0.8, where remote attackers can achieve arbitrary code execution via mailing-list attachments (SEC-452). The CVE entry is corroborated across multiple sources (NVD, Red Hat, CNVD, CVE List). Patches exist (76.0.8+), but exploitation details are not elabor...
CVE-2019-14414
In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains SEC-478...
CVE-2019-14414
CVE-2019-14414 affects cPanel before 78.0.2, where a Userdata cache temporary file can conflict with domains (SEC-478). The vulnerability concerns the Userdata cache handling and is documented with a Low severity (CVSSv2/3: low, local access, partial integrity impact). Exploitation details are no...
CVE-2019-14413
CVE-2019-14413 affects cPanel prior to 78.0.2, where an input validation/permissions issue allows certain file-write operations as a shared user during connection resets (SEC-476). Documented by multiple sources (NVD, Red Hat, CNVD, CVE lists) confirms the vulnerability in the cPanel web-based pl...
CVE-2019-14413
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...
CVE-2019-14412
Maketext in cPanel before 78.0.2 allows format-string injection in the DCV checkdomainsviadns UAPI SEC-474...
CVE-2019-14412
CVE-2019-14412 affects cPanel before 78.0.2, where the Maketext function can perform a format-string injection via the DCV domain validation via DNS UAPI (SEC-474). The underlying issue is a formatting string handling flaw in Maketext, enabling injection within the DCV check_domains_via_dns UAPI....
CVE-2019-14411
CVE-2019-14411 affects cPanel prior to 78.0.2. The vulnerability arises because the DCV UAPI does not properly restrict demo accounts from writing to files, enabling an attacker to write to files via the DCV UAPI (SEC-473). Impact is implicit in the description: unauthorized file writes by demo a...