CVE-2017-18419

CVE-2017-18419 affects cPanel before 66.0.2. The issue is a stored XSS during WHM cPAddons uninstallation caused by insufficient input validation in the cPAddons uninstall flow. The vulnerability can lead to arbitrary script execution within the context of affected users when the uninstallation U...

CVE-2017-18418

CVE-2017-18418 affects cPanel before 66.0.2, enabling stored XSS during WHM cPAddons file operations (SEC-265). The vulnerability is tied to versions prior to 66.0.2; remediation involves upgrading to 66.0.2 or later (per changelogs/references in the connected documents). Exploitation details are...

CVE-2017-18418

cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...

CVE-2017-18417

CVE-2017-18417 affects cPanel prior to 66.0.2, where stored XSS can occur during WHM cPAddons installation. The vulnerability is tied to the cPAddons installation flow in WHM, enabling injected client-side scripts. Red Hat and CNVD entries corroborate the same issue with versions before 66.0.2. R...

CVE-2017-18408

cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...

CVE-2017-18408

CVE-2017-18408 affects cPanel before 67.9999.103, exposing a stored XSS vulnerability in the WHM MySQL Password Change interfaces (SEC-282). Multiple sources confirm the issue and reference the same remediation version 67.9999.103. The root cause is described in CNVD-2019-30473 as inadequate vali...

CVE-2017-18408

cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...

CVE-2018-20950

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

CVE-2018-20950

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

CVE-2018-20951

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

CVE-2018-20949

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

CVE-2018-20953

cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2016-10827

cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...

Design/Logic Flaw

cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...

Design/Logic Flaw

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

Cross site scripting

cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...

Cross site scripting

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

Design/Logic Flaw

cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...

CVE-2016-10827

CVE-2016-10827 : A stored XSS vulnerability in cPanel/WHM (Edit System Mail Preferences) affects versions before 55.9999.141. The issue is described as a self-stored cross-site scripting flaw that could be exploited through the affected mail preferences UI. Public references in the connected docu...