777 matches found
PT-2019-7623
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 55.9999.141 Description The issue allows for self-stored XSS in the WHM Edit System Mail Preferences. Recommendations For versions prior to 55.9999.141, update to version 55.9999.141 or later to resolve the issue...
PT-2019-7647
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue allows self XSS in the WHM PHP Configuration editor interface. Recommendations For versions prior to 11.54.0.4, update to version 11.54.0.4 or later to resolve the issue...
PT-2019-7649
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue allows for stored XSS in the WHM Feature Manager interface. Recommendations For versions prior to 11.54.0.4, update to version 11.54.0.4 or later to resolve the issue...
PT-2019-7656
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.0 Description The issue allows unauthorized modification of zones through the WHM API. Recommendations For versions prior to 11.54.0.0, update to version 11.54.0.0 or later to resolve the issue...
CVE-2016-10827: Improper Neutralization of Input During Web Page Generation
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
CVE-2018-20953: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20952: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20951: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20950: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20949: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20938: Improper Access Control
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls SEC-324...
CVE-2018-20935: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20933: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
CVE-2018-20926: Unrestricted Upload of File with Dangerous Type
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...
CVE-2018-20925: Unrestricted Upload of File with Dangerous Type
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface SEC-379...
CVE-2018-20924: Improper Authentication
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...
CVE-2018-20921: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...
CVE-2018-20923: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action SEC-377...