CVE-2016-10847

cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...

CVE-2018-20924

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

CVE-2018-20945

bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...

CVE-2018-20945

The CVE-2018-20945 issue affects cPanel prior to 68.0.27 (bin/csvprocess) and enables insecure file operations due to SEC-354. Affected product: cPanel / web hosting control panel. Root cause details are consistently described across connected records as insecure file handling in bin/csvprocess b...

CVE-2016-10847

CVE-2016-10847 affects cPanel prior to 11.54.0.4. The vulnerability allows arbitrary file-read and file-write operations via the scripts/fixmailboxpath entry point (SEC-80). This could enable an attacker to read or write sensitive files on affected systems. Evidence from multiple sources confirms...

CVE-2018-20924

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...

PT-2019-10380

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows for insecure file operations. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later to resolve the issue...

CVE-2018-20945: Improper Authorization

bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...

CVE-2019-14394

cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

Code injection

cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...

Design/Logic Flaw

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

CVE-2019-14399

The CVE-2019-14399 affects cPanel’s SSL certificate-storage feature prior to version 78.0.18, allowing unsafe file operations in the root context (SEC-477). The root-privilege impact is indicated by the CVSS data (high for CVSS3, medium for CVSS2). The available connected sources confirm the prod...

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

CVE-2019-14394

CVE-2019-14394 affects cPanel prior to 80.0.5 where the fetch_ssl_certificates_for_fqdns API can perform unsafe file operations in the context of the root account. Multiple connected sources confirm this vulnerability exists in cPanel and describes an unsafe file operation flaw exploitable locall...

CVE-2019-14394

cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...

PT-2019-13663

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue allows for unsafe file operations in the context of the root account. This is achieved via the "fetch ssl certificates for fqdns" API endpoint. Recommendations For versions prior to 80.0.5,...

CVE-2019-14394: Undefined Security Weakness

cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...

CVE-2019-14399: Undefined Security Weakness

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...