11 matches found
CVE-2016-10847
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
CVE-2016-10839
cPanel before 11.54.0.4 allows SQL injection in bin/hordeupdateusernames SEC-71...
CVE-2016-10844
The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...
cPanel Injection Vulnerability (CNVD-2019-36138)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in cPanel versions prior to 11.54.0.4. The vulnerability stems from a lack of proper validation...
Unspecified vulnerability in cPanel (CNVD-2019-36143)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit the vulnerability to...
cPanel Injection Vulnerability (CNVD-2019-36141)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in cPanel versions prior to 11.54.0.4. The vulnerability stems from a lack of proper validation...
cPanel Information Disclosure Vulnerability (CNVD-2019-36144)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from an error in...
CVE-2016-10844
The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...
CVE-2016-10848
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck SEC-81...
CVE-2016-10852
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...
Design/Logic Flaw
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...