582 matches found
CVE-2018-20896
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20899
CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20896
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20896
CVE-2018-20896 affects cPanel before 71.9980.37, enabling code injection via the WHM cPAddons interface (SEC-394). Affected component: cPanel/WHM, specifically the cPAddons interface. Underlying issue is a code injection vulnerability in that interface. According to CVSS, impact is LOW for confid...
CVE-2018-20884
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
CVE-2018-20884
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
CVE-2018-20874
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...
CVE-2018-20878
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20882
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
CVE-2018-20875
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20882
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
Design/Logic Flaw
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
Design/Logic Flaw
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20884
CVE-2018-20884 affects cPanel before 74.0.0; it describes a stored XSS in the WHM File Restoration interface (SEC-367). The connected sources corroborate the same description across multiple feeds (Red Hat, CNVD, NVD mirrors, CVE lists). No exploitation details or explicit remediation are provide...