1929 matches found
CVE-2018-20947
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script SEC-356...
CVE-2016-10831
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account SEC-101...
CVE-2016-10828
cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path SEC-97...
CVE-2016-10832
cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging SEC-102...
CVE-2016-10830
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
CVE-2016-10827
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
Authentication flaw
cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging SEC-107...
Design/Logic Flaw
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...
Cross site scripting
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Design/Logic Flaw
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents SEC-92...
Design/Logic Flaw
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2016-10823
The vulnerability CVE-2016-10823 affects cPanel before 55.9999.141. The root cause is MakeText interpolation, enabling arbitrary code execution in the context of the root account. Documented in multiple sources (NVD, RH, PRION, CVE lists) with the same impact description. No explicit exploit deta...
CVE-2016-10824
CVE-2016-10824 affects cPanel prior to 55.9999.141. The vulnerability enables unauthenticated arbitrary code execution via DNS NS entry poisoning. Public details in the provided connected sources are limited to the affected version and impact; no root-cause specifics or remediation steps are desc...
CVE-2016-10831
CVE-2016-10831 affects cPanel before 55.9999.141. The issue is an authentication flaw where possessing another account does not trigger a two-factor authentication check (SEC-101). The vulnerability is described across multiple sources as an authorization/authentication issue in these versions. I...
