2850 matches found
CVE-2016-10770
cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update SEC-164...
Design/Logic Flaw
cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update SEC-164...
CVE-2016-10770
CVE-2016-10770 affects cPanel prior to 60.0.25. The vulnerability allows arbitrary file-overwrite operations during a Roundcube update (SEC-164). The provided documents consistently describe this as a cPanel issue related to the update process, with no additional technical details (e.g., affected...
CVE-2016-10770
cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update SEC-164...
CVE-2016-10770: Improper Input Validation
cPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update SEC-164...
PT-2019-7566
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows arbitrary file-overwrite operations during a Roundcube update. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issue...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2017-18450
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convertroundcubemysql2sqlite SEC-255...
CVE-2017-18416
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
CVE-2017-18416
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
Design/Logic Flaw
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
CVE-2017-18416
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
CVE-2017-18416
CVE-2017-18416 affects cPanel prior to 67.9999.103. The issue allows arbitrary file-overwrite during a Roundcube SQLite schema update (SEC-303). Connected sources confirm the vulnerability is tied to cPanel’s handling of the Roundcube SQLite schema update, enabling overwriting of arbitrary files....
PT-2019-8384
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows certain file-rename operations in the context of the root account via scripts/convert roundcube mysql2sqlite. Recommendations For versions prior to 64.0.21, update to version 64.0.2...
PT-2019-8385
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows certain file-chmod operations via the /scripts/convert roundcube mysql2sqlite endpoint. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve...
CVE-2017-18416: Improper Access Control
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update SEC-303...
PT-2019-8351
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue allows arbitrary file-overwrite operations during a Roundcube SQLite schema update. Recommendations For versions prior to 67.9999.103, update to version 67.9999.103 or later to resolve...
CVE-2016-10846
cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions SEC-79...