5267 matches found
CVE-2018-20931
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page SEC-405...
Code injection
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page SEC-405...
CVE-2018-20931
The CVE-2018-20931 issue affects cPanel prior to 70.0.23, where demo (non-privileged) accounts can execute code via the Landing Page (SEC-405). The vulnerability enables code execution through the web interface and is reflected in multiple sources (e.g., NVD, RH, CNVD). Affected product: cPanel W...
CVE-2018-20912
cPanel before 70.0.23 allows demo accounts to execute code via awstats SEC-362...
Command injection
cPanel before 70.0.23 allows demo accounts to execute code via awstats SEC-362...
CVE-2018-20912
cPanel before 70.0.23 allows demo accounts to execute code via awstats SEC-362...
CVE-2018-20912
Summary: CVE-2018-20912 affects cPanel before 70.0.23, where demo accounts could cause code execution via awstats (SEC-362). The issue is reported across multiple sources (e.g., Red Hat and CNVD entries) with the consistent description that vulnerable versions prior to 70.0.23 permit arbitrary co...
CVE-2018-20879
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...
CVE-2018-20879
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...
CVE-2018-20879
Summary: CVE-2018-20879 affects cPanel prior to 74.0.8, where demo accounts could execute arbitrary code via the Fileman::viewfile API (SEC-444). The public records indicate an unknown root cause in Fileman::viewfile that enables code execution. The NVD/CVE entries provide a CVSSv3 base score of ...
CVE-2018-20879
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...
cPanel Access Control Error Vulnerability
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An access control error vulnerability exists in cPanel versions prior to 80.0.5, which can be exploited by an attacker to modify...
CVE-2019-14411
cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI SEC-473...
CVE-2019-14411
cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI SEC-473...
CVE-2019-14398
cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajaxmaketextsyntaxutil.pl SEC-498...
CVE-2019-14405
cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg SEC-487...
CVE-2019-14397
cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call SEC-496...
CVE-2019-14405
cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg SEC-487...