777 matches found
CVE-2018-20922: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...
CVE-2018-20919: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...
CVE-2016-10851: Improper Neutralization of Input During Web Page Generation
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...
CVE-2018-20918: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...
CVE-2018-20916: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20915: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
CVE-2016-10853: Improper Neutralization of Input During Web Page Generation
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
CVE-2018-20913: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi SEC-364...
CVE-2016-10860: Improper Access Control
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2018-20910: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20903: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2018-20901: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...
CVE-2018-20899: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20896: Improper Control of Generation of Code
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20884: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
CVE-2018-20882: Improper Input Validation
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
CVE-2018-20878: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...
CVE-2018-20877: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...