582 matches found
CVE-2018-20933
CVE-2018-20933 affects cPanel before 70.0.23, with a Stored XSS via the WHM Edit DNS Zone action (SEC-410). The available connected documents confirm the vulnerable component as the WHM DNS editing workflow and identify the vulnerability class as stored cross-site scripting. No additional exploit...
CVE-2018-20926
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...
CVE-2018-20926
CVE-2018-20926 affects cPanel before 70.0.23 and allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). Red Hat notes the issue in cPanel prior to 70.0.23; CNVD/CVELIST entries confirm the same. Impact is local, with privileges elevated if exploited. Remediation is u...
CVE-2018-20925
CVE-2018-20925 affects cPanel prior to 70.0.23. It enables local privilege escalation via the WHM Legacy Language File Upload interface. Red Hat and CNVD entries corroborate the affected version range. Remediation: upgrade to 70.0.23 or later (fixed in 70.x releases).
CVE-2018-20925
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface SEC-379...
CVE-2018-20924
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...
CVE-2018-20918
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...
CVE-2018-20923
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action SEC-377...
CVE-2018-20919
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...
CVE-2018-20915
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
CVE-2018-20920
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
CVE-2018-20922
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...
CVE-2018-20916
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20919
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2016-10853
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
CVE-2018-20901
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...