8 matches found
CVE-2017-18438
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
EUVD-2017-9554
Malware in sbrugna...
CVE-2017-18438
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
Code injection
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
CVE-2017-18438
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
CVE-2017-18438
CVE-2017-18438 affects cPanel prior to 64.0.21. The issue allows a demo account to execute code through Encoding API calls (SEC-242), enabling code execution with what is described as low privilege, network-remote access. The provided connected documents confirm the vulnerability exists in the cP...
CVE-2017-18438: Improper Restriction of XML External Entity Reference
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
PT-2019-8373
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows demo accounts to execute code via Encoding API calls. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...