11 matches found
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager WHM, which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643 , impacts all supported versions of cPanel &...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
EUVD-2016-1807
Malware in sbrugna...
EUVD-2017-9571
Malware in sbrugna...
PT-2019-8390
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue concerns the conversion of addon domains, which did not require a package for resellers. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
CVE-2016-10813 affects cPanel prior to 57.9999.54, where an input handling flaw during FTP account creation under addon domains allows self-XSS. Root cause: insufficient input validation in the addon domains FTP creation flow. Impact: client-side script execution under the victim’s browser; no se...
CVE-2016-10813: Improper Neutralization of Input During Web Page Generation
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
PT-2019-7609
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows self XSS during ftp account creation under addon domains. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...