cPanel cross-site scripting vulnerability (CNVD-2019-26366)

cPanel is a set of the most prestigious commercial software in the web hosting industry, which is based on Linux and BSD system, developed in PHP and closed-source software in nature, providing powerful and quite complete hosting management functions. A stored cross-site scripting vulnerability...

CVE-2018-20868

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...

CVE-2018-20865

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

Cross site scripting

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...

Cross site scripting

cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature SEC-461...

CVE-2018-20868

cPanel before 76.0.8 contains a Stored XSS in the WHM MultiPHP Manager interface (SEC-464). Affected product: cPanel/WHM (MultiPHP Manager); vulnerable component: stored XSS in the interface. Root cause: vulnerability described as Stored XSS; the exact exploit details are not provided in the docu...

CVE-2018-20865

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

CVE-2018-20865

CVE-2018-20865 affects cPanel prior to 76.0.8, where a Self XSS flaw exists in the WHM Addtional Backup Destination field (SEC-459). Exploitation context is not detailed in the provided documents, but the vulnerability is tied to user-supplied content in the WHM backup destination setting, enabli...

CVE-2019-14390

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14386

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

CVE-2019-14390

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

Design/Logic Flaw

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

Cross site scripting

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14390

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14386

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

CVE-2019-14386

CVE-2019-14386 affects cPanel before 82.0.2, where a stored XSS vulnerability exists in the WHM Tomcat Manager interface (SEC-504). Impact is cross-site scripting; remediation is to upgrade to 82.0.2 or later (per provided sources). If exploitation details are not provided in the documents, note ...

PT-2019-13659

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.2 Description The issue concerns stored XSS in the WHM Modify Account interface. Recommendations For versions prior to 82.0.2, update to version 82.0.2 or later to resolve the issue...

PT-2019-13655

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.2 Description The issue concerns stored XSS in the WHM Tomcat Manager interface. Recommendations For versions prior to 82.0.2, update to version 82.0.2 or later to resolve the issue...

PT-2019-10293

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 76.0.8 Description: The issue concerns a Self XSS in the WHM Additional Backup Destination field. Recommendations: For versions prior to 76.0.8, update to version 76.0.8 or later to resolve the issue...

PT-2019-10294

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 76.0.8 Description: The issue concerns a Stored XSS in the WHM "Reset a DNS Zone" feature. Recommendations: For versions prior to 76.0.8, update to version 76.0.8 or later to resolve the issue...