5267 matches found
CVE-2017-18468
cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...
Code injection
cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...
CVE-2017-18468
cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...
CVE-2017-18468
CVE-2017-18468 affects cPanel prior to 62.0.17. The vulnerability arises in the Htaccess::setphppreference API (SEC-232), enabling code execution by demo accounts. No exploitation details are provided in the documents. Affected software: cPanel before 62.0.17. Impact: remote code execution by una...
cPanel Input Validation Error Vulnerability (CNVD-2019-29613)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 70.0.23. An attacker can exploit the vulnerability to execut...
CVE-2017-18436
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call SEC-239...
CVE-2017-18441
cPanel before 64.0.21 allows demo accounts to redirect web traffic SEC-245...
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
CVE-2017-18446
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
CVE-2017-18442
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...
CVE-2017-18438
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
CVE-2017-18443
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...
CVE-2017-18440
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
CVE-2017-18447
cPanel before 64.0.21 allows demo accounts to execute code via the ClamScannergetsocket API SEC-251...
CVE-2017-18446
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
CVE-2017-18444
cPanel before 64.0.21 allows demo accounts to execute SSH API commands SEC-248...
CVE-2017-18440
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
CVE-2017-18442
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...