cPanel Self-XSS Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A self-XSS vulnerability exists in the "WHM Transfer Tool" interface in cPanel versions prior to 90.0.17. No details of the vulnerability are available at this time...

cPanel 跨站脚本漏洞

cPanel is a set of Web-based host control management system of the U.S. cPanel. A self-XSS vulnerability exists in the "WHM Transfer Tool" interface in cPanel versions prior to 90.0.17. No details of the vulnerability are available at this time...

2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

cPanel, a provider of popular administrative tools to manage web hosting, has patched a security vulnerability that could have allowed remote attackers with access to valid credentials to bypass two-factor authentication 2FA protection on an account. The issue, tracked as "SEC-575" and discovered...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26113

cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces SEC-569...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces SEC-569...

Design/Logic Flaw

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26111

CVE-2020-26111 affects cPanel prior to 90.0.10. The vulnerability is a self XSS in the WHM Edit DNS Zone interface (SEC-566). Impact described as partial integrity risk with low confidentiality/low integrity and no availability impact in CVSS 3.1 (base score 6.1; UI required; network vector; chan...

CVE-2020-26113

cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces SEC-569...

CVE-2020-26113

CVE-2020-26113 affects cPanel before 90.0.10, with a self XSS vulnerability in the WHM Manage API Tokens interfaces (SEC-569). The weakness allows execution of client‑side code via token management UI, enabling a logged‑in attacker to potentially compromise session integrity. Public references co...

WHM 0.82.19 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications =================================================== Title : WHM v0.82.16 Twitter : @H3xr4in BLog : https://sudo-security.github.io 0day.today 2020-07-19...

CVE-2019-20497

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...

Design/Logic Flaw

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...

CVE-2019-20497

The CVE-2019-20497 vulnerability affects cPanel prior to version 82.0.18, allowing stored XSS via the WHM Backup Restoration feature. Root cause details are not further described in the provided documents beyond the XSS via backup restore path. No exploit specifics, mitigations, or confirmed patc...

CVE-2019-20497

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...

CVE-2012-6449

The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 build 8 have a XSS vulnerability...

Design/Logic Flaw

The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 build 8 have a XSS vulnerability...

CVE-2012-6449

The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 build 8 have a XSS vulnerability...