511 matches found
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2016-10827
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Cross site scripting
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
Cross site scripting
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2016-10827
CVE-2016-10827 : A stored XSS vulnerability in cPanel/WHM (Edit System Mail Preferences) affects versions before 55.9999.141. The issue is described as a self-stored cross-site scripting flaw that could be exploited through the affected mail preferences UI. Public references in the connected docu...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20953
CVE-2018-20953 affects cPanel before 68.0.27, enabling self-XSS in the WHM listips interface due to insufficient input validation. Impact is client-side code execution in the victim’s browser when interacting with the interface. The vulnerability is documented across multiple sources (NVD/Red Hat...
CVE-2018-20952
CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20951
CVE-2018-20951 affects cPanel prior to 68.0.27, enabling a self XSS in the WHM Spamd Startup Config. The vulnerability stems from insufficient validation of client-controlled data in the Startup Config, allowing execution of client-side code in some contexts. Affected software is cPanel/WHM (Spam...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20949
Summary: CVE-2018-20949 affects cPanel prior to 68.0.27, specifically the WHM Apache Configuration Include Editor. The root cause is a lack of proper validation of client-side data, enabling a self XSS condition. Impact (as documented): self XSS could allow an attacker to execute client-side code...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...