CVE-2019-17380

cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...

CVE-2019-17377

cPanel before 82.0.15 allows self XSS in LiveAPI example scripts SEC-524...

Design/Logic Flaw

cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...

Design/Logic Flaw

cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...

Design/Logic Flaw

cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...

Design/Logic Flaw

cPanel before 82.0.15 allows self XSS in LiveAPI example scripts SEC-524...

CVE-2019-17378

cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...

CVE-2019-17377

The CVE-2019-17377 issue affects cPanel prior to 82.0.15, where the LiveAPI sample scripts are vulnerable to self-XSS due to insufficient validation of client‑side data in the web application. Exploitation could allow an attacker to execute arbitrary client-side code within affected sessions. Rem...

CVE-2019-17376

CVE-2019-17376 affects cPanel prior to 82.0.15, where the SSL Certificate Upload interface is vulnerable to self-XSS due to insufficient validation in client-side data handling. Multiple sources confirm the flaw exists in the SSL Certificate Upload feature and is tied to versions older than 82.0....

CVE-2019-17376

cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...

Design/Logic Flaw

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10806

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10781

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...

CVE-2016-10784

cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...

CVE-2016-10781

CVE-2016-10781 affects cPanel prior to 60.0.25, where the UI_confirm API is vulnerable to self-XSS due to insufficient validation of client-side data. The vulnerability can allow an attacker to execute client-side code via the UI_confirm interface, as described in the public records (SEC-180). Th...

CVE-2016-10781

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

CVE-2016-10777

Summary of CVE-2016-10777 : The vulnerability affects cPanel before 60.0.25 and is described as a self‑XSS in the WHM Tweak Settings for the parameter autodiscover_host (SEC-177). The issue originates from insufficient input handling in the affected web interface, enabling an attacker to cause cl...