511 matches found
CVE-2017-18454
CVE-2017-18454 affects cPanel prior to 62.0.24, where stored XSS is possible in the WHM cPAddons install interface (SEC-262) due to insufficient input validation. Impact is client-side code execution in authenticated context; CVSS–low/medium ranges reflect partial confidentiality/integrity but no...
CVE-2017-18417
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation SEC-263...
CVE-2017-18419
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
CVE-2017-18419
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
CVE-2017-18420
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
Cross site scripting
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
Cross site scripting
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
Cross site scripting
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
Cross site scripting
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation SEC-263...
CVE-2017-18419
CVE-2017-18419 affects cPanel before 66.0.2. The issue is a stored XSS during WHM cPAddons uninstallation caused by insufficient input validation in the cPAddons uninstall flow. The vulnerability can lead to arbitrary script execution within the context of affected users when the uninstallation U...
CVE-2017-18418
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
CVE-2017-18418
CVE-2017-18418 affects cPanel before 66.0.2, enabling stored XSS during WHM cPAddons file operations (SEC-265). The vulnerability is tied to versions prior to 66.0.2; remediation involves upgrading to 66.0.2 or later (per changelogs/references in the connected documents). Exploitation details are...
CVE-2017-18417
CVE-2017-18417 affects cPanel prior to 66.0.2, where stored XSS can occur during WHM cPAddons installation. The vulnerability is tied to the cPAddons installation flow in WHM, enabling injected client-side scripts. Red Hat and CNVD entries corroborate the same issue with versions before 66.0.2. R...
CVE-2017-18408
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...
CVE-2017-18408
CVE-2017-18408 affects cPanel before 67.9999.103, exposing a stored XSS vulnerability in the WHM MySQL Password Change interfaces (SEC-282). Multiple sources confirm the issue and reference the same remediation version 67.9999.103. The root cause is described in CNVD-2019-30473 as inadequate vali...
CVE-2017-18408
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...