1928 matches found
CVE-2017-18468
CVE-2017-18468 affects cPanel prior to 62.0.17. The vulnerability arises in the Htaccess::setphppreference API (SEC-232), enabling code execution by demo accounts. No exploitation details are provided in the documents. Affected software: cPanel before 62.0.17. Impact: remote code execution by una...
CVE-2017-18468
cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...
CVE-2017-18467
CVE-2017-18467 affects cPanel prior to version 62.0.17. A URL filtering error (SEC-229) allows access to restricted resources. The core issue is a URL filtering flaw in the affected path, enabling unintended resource access. Remediation: upgrade to at least 62.0.17 (as indicated by the CVE descri...
CVE-2017-18466
CVE-2017-18466 affects cPanel prior to 62.0.17. The issue is that the system does not properly recognize domain ownership when adding parked domains to a mail configuration (SEC-228). Affected product/version: cPanel before 62.0.17. Description across connected sources reiterates the same vulnera...
CVE-2017-18464
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
CVE-2017-18462
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
CVE-2017-18470: Undefined Security Weakness
cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...
CVE-2017-18477: Undefined Security Weakness
In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...
CVE-2017-18479: Improper Certificate Validation
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...
CVE-2017-18481: Improper Neutralization of Input During Web Page Generation
cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface SEC-211...
CVE-2017-18480: Undefined Security Weakness
cPanel before 62.0.4 does not enforce account ownership for hasmycnfforcpuser WHM API calls SEC-210...
CVE-2017-18474: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...
CVE-2017-18475: Improper Input Validation
In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...
CVE-2016-10767: Improper Neutralization of Input During Web Page Generation
cPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface SEC-159...
CVE-2017-18452
cPanel before 64.0.21 allows code execution via Rails configuration files SEC-259...
CVE-2017-18450
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convertroundcubemysql2sqlite SEC-255...
CVE-2017-18448
cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...
CVE-2017-18446
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
