CVE-2018-20882

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

Design/Logic Flaw

cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

Design/Logic Flaw

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...

Design/Logic Flaw

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20884

CVE-2018-20884 affects cPanel before 74.0.0; it describes a stored XSS in the WHM File Restoration interface (SEC-367). The connected sources corroborate the same description across multiple feeds (Red Hat, CNVD, NVD mirrors, CVE lists). No exploitation details or explicit remediation are provide...

CVE-2018-20882

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...

CVE-2018-20882

CVE-2018-20882 affects cPanel prior to 74.0.8, enabling arbitrary file-write under the root context during WHM Force Password Change (SEC-447). This is a local-attack vector impacting systems running affected cPanel versions. The vulnerability arises in the root context during the password-change...

CVE-2018-20878

CVE-2018-20878 affects cPanel prior to 74.0.8, where a stored XSS vulnerability exists in the WHM “File and Directory Restoration” interface (SEC-441). The CNVD entry notes the issue stems from a lack of proper validation of client-side data in the WEB application. Connected records consistently ...

CVE-2018-20878

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...

CVE-2018-20877

CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20875

CVE-2018-20875 affects cPanel before 74.0.8, where a self XSS exists in the WHM Security Questions interface (SEC-433). Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the vulnerability pattern and the affected version range. The core issue is a self XSS condition caused by insufficient i...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20874

CVE-2018-20874 involves the CPANEL/WHM component: before version 74.0.8, the"Create a New Account" interface is vulnerable to a self-XSS vulnerability (SEC-428). The description consistently states that this affects cPanel prior to 74.0.8 and enables self-XSS in the WHM UI when creating new accou...

CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

cPanel cross-site scripting vulnerability (CNVD-2019-26366)

cPanel is a set of the most prestigious commercial software in the web hosting industry, which is based on Linux and BSD system, developed in PHP and closed-source software in nature, providing powerful and quite complete hosting management functions. A stored cross-site scripting vulnerability...