585 matches found
CVE-2017-18464
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
Design/Logic Flaw
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
CVE-2017-18464
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
CVE-2017-18464
CVE-2017-18464 affects cPanel before 62.0.17. The vulnerability arises in the WHM Zone Template editor (SEC-226), allowing arbitrary file overwrite due to insufficient input validation. Impact stated as potential for unauthorized file modification. The Red Hat and other sources confirm the same d...
cPanel cross-site scripting vulnerability (CNVD-2019-26357)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Feature Manager interface in versions prior to cPanel 11.54.0.4...
CVE-2017-18457
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs SEC-218...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
Cross site scripting
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface SEC-262...
Design/Logic Flaw
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
Design/Logic Flaw
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs SEC-218...
CVE-2017-18457
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs SEC-218...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18456
CVE-2017-18456 affects cPanel before 62.0.17, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS due to improper input handling. Root cause details across connected sources indicate lack of proper validation of client data in the web UI, enabling a malicious actor to execute ...
CVE-2017-18454
CVE-2017-18454 affects cPanel prior to 62.0.24, where stored XSS is possible in the WHM cPAddons install interface (SEC-262) due to insufficient input validation. Impact is client-side code execution in authenticated context; CVSS–low/medium ranges reflect partial confidentiality/integrity but no...
CVE-2017-18454
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface SEC-262...
CVE-2017-18419
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
CVE-2017-18420
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
CVE-2017-18417
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation SEC-263...