CVE-2016-10860

cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...

CVE-2018-20910

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20910

The CVE-2018-20910 entry concerns cPanel before 70.0.23, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS. The issue stems from insufficient validation of client-side data, enabling an attacker to execute client-side code in affected versions. Public references indicate the...

CVE-2018-20903

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...

CVE-2018-20903

CVE-2018-20903 concerns cPanel prior to 71.9980.37, where the WHM Backup Configuration interface is vulnerable to self-XSS (SEC-421). The root cause is user input not properly validated client-side, allowing injected script when viewed in the backup config context. Impact is self-XSS in the inter...

CVE-2018-20901

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...

CVE-2018-20901

CVE-2018-20901 affects cPanel before 71.9980.37 and enables Remote-Stored XSS in the WHM Save Theme Interface (SEC-400). The incident is described as XSS that can be triggered remotely via the Save Theme UI, with a CVSS v3 base score of 6.1 (MEDIUM) and CVSS v2 base score 4.3 (MEDIUM). The availa...

CVE-2018-20896

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...

CVE-2018-20899

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

CVE-2018-20896

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...

Design/Logic Flaw

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

CVE-2018-20899

CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...

CVE-2018-20899

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

CVE-2018-20896

CVE-2018-20896 affects cPanel before 71.9980.37, enabling code injection via the WHM cPAddons interface (SEC-394). Affected component: cPanel/WHM, specifically the cPAddons interface. Underlying issue is a code injection vulnerability in that interface. According to CVSS, impact is LOW for confid...

CVE-2018-20896

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...

CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

CVE-2018-20884

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

CVE-2018-20878

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...

CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

CVE-2018-20882

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...