CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

CVE-2018-20946

cPanel before 68.0.27 exposes zone information because the archive_sync_zones script creates a world‑readable archive. This info disclosure vulnerability is documented across CVE‑2018‑20946 entries (NVD, RH, CNVD, etc.). Impact is information exposure of zones; CVSS v3 score is Low (3.3) with loc...

CVE-2018-20935

cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...

CVE-2018-20935

CVE-2018-20935 affects cPanel before 70.0.23, enabling stored XSS via the WHM action “Reset a DNS Zone” (SEC-412). Root cause cited as insufficient validation of client-side data. Impact is stored XSS; CVSS metrics in NVD show MEDIUM/LOW levels. A fix is available in or after version 70.0.23 (see...

CVE-2018-20933

CVE-2018-20933 affects cPanel before 70.0.23, with a Stored XSS via the WHM Edit DNS Zone action (SEC-410). The available connected documents confirm the vulnerable component as the WHM DNS editing workflow and identify the vulnerability class as stored cross-site scripting. No additional exploit...

CVE-2018-20920

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

CVE-2018-20921

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

CVE-2018-20915

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

CVE-2018-20915

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

CVE-2018-20921

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

CVE-2018-20920

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

CVE-2016-10860

cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

Cross site scripting

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

CVE-2018-20921

CVE-2018-20921: cPanel before 70.0.23 allows a stored XSS via the WHM action “Delete a DNS Zone” (SEC-375). The event is triggered by unvalidated data in the DNS zone deletion workflow within WHM. The available documents consistently describe the vulnerability as stored XSS affecting cPanel/WHM p...

CVE-2018-20920

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

CVE-2018-20920

CVE-2018-20920 : cPanel before 70.0.23 is affected by a stored XSS in the WHM Edit DNS Zone action (SEC-374). Root cause stated in CNVD/Red Hat sources as insufficient validation of client-side data, enabling execution of injected scripts. Affected product: cPanel/WHM (versions prior to 70.0.23)....

CVE-2018-20915

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

CVE-2016-10860

CVE-2016-10860 affects cPanel before 11.54.0.0 and is documented as allowing unauthorized zone modification through the WHM API (SEC-66). The vulnerability is corroborated across multiple sources in the connected documents (NVD entry and Red Hat advisory), which state the same affected software a...