1933 matches found
CVE-2016-10847: Improper Neutralization of Special Elements in Output Used by a Downstream Component
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
CVE-2018-20920: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
CVE-2016-10853: Improper Neutralization of Input During Web Page Generation
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
CVE-2018-20922: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...
CVE-2016-10851: Improper Neutralization of Input During Web Page Generation
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...
CVE-2018-20906: Incorrect Permission Assignment for Critical Resource
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...
CVE-2018-20903: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2018-20879: Improper Input Validation
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...
CVE-2016-10837: Untrusted Search Path
cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path SEC-46...
CVE-2018-20898: Improper Neutralization of Special Elements in Output Used by a Downstream Component
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
CVE-2018-20889: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...
CVE-2018-20876: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...
CVE-2018-20891: Improper Input Validation
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
CVE-2018-20875: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20928: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2016-10841: Undefined Security Weakness
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes SEC-73...
CVE-2018-20923: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action SEC-377...
CVE-2018-20918: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...