CVE-2021-46561

controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new...

Cross site scripting

cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...

eNom Inter-Account Transfer Issue

the m group security advisory 2017090100: Zero-confirmation inter-account transfers of .uk domains with eNom Discovery date: 2017-05-02 Publish date: 2017-09-01 +122 days Product: https://www.enom.com/, the website for eNom Inc. and their APIs, all eNom resellers Vulnerable: yes, as of publicatio...