5637 matches found
CVE-2018-20892
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
CVE-2018-20890
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
CVE-2018-20892
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
CVE-2018-20890
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
CVE-2018-20892
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
CVE-2018-20892
CVE-2018-20892 affects cPanel prior to 74.0.0, where incorrect handling of CAA records allows arbitrary zone file modifications. Root cause: CAA handling flaw in the affected component. Impact per sources is modification of DNS zone data. No exploitation details or patches are specified in the pr...
CVE-2018-20890
CVE-2018-20890 is associated with cPanel prior to 74.0.0 and is described as allowing arbitrary zone file modifications during DNS record edits (SEC-426). The connected sources confirm the affected software and the root cause is the ability to modify zone records during edits, implying integrity ...
CVE-2018-20890
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
PT-2019-10347
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via a WHM Edit DNS Zone action. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...
CVE-2018-20892: Undefined Security Weakness
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
CVE-2018-20935: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20921: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...
PT-2019-10354
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via a WHM "Delete a DNS Zone" action. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...
CVE-2018-20890: Improper Access Control
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
CVE-2016-10860: Improper Access Control
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2018-20920: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
PT-2019-10322
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.0 Description: The issue arises from incorrect CAA record handling, allowing arbitrary zone file modifications. Recommendations: For versions prior to 74.0.0, update to version 74.0.0 or later to resolve the issu...
PT-2019-10353
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via a WHM Edit DNS Zone action. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...