2713 matches found
CVE-2019-14948
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
PT-2019-13885 · Woocommerce · Woocommerce Product Add-Ons
Name of the Vulnerable Software and Affected Versions: woocommerce-product-addon plugin version prior to 18.4 Description: The issue allows for XSS via an import of a new meta data structure. Recommendations: For versions prior to 18.4, update to version 18.4 or later to resolve the issue...
CVE-2019-14948: Improper Neutralization of Input During Web Page Generation
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure...
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues
Unauthenticated option changes vulnerability that could allow an attacker to redirect all pages and posts of the blog to a malicious website, as well as an authenticated options export/deletion vulnerability...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
Code injection
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18455
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18455
CVE-2017-18455 affects cPanel prior to 62.0.17, where addon domain conversion did not require a package for resellers (SEC-208). The available connected documents confirm the same description across Red Hat, CVE lists, and other feeds, but do not provide explicit exploitation details or a cited r...
CVE-2017-18420
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18411
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2017-18411
The CVE-2017-18411 issue concerns cPanel’s addon domain conversion feature (pre-67.9999.103). The affected component is the addon domain conversion workflow, which can copy all MySQL databases to the newly created account, per SEC-285. The available documents describe the vulnerability impact as ...
PT-2019-8346
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue concerns the "addon domain conversion" feature in cPanel, which can copy all MySQL databases to the new account. Recommendations For versions prior to 67.9999.103, update to version...
PT-2019-8390
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue concerns the conversion of addon domains, which did not require a package for resellers. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the...
CVE-2017-18455: Undefined Security Weakness
In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...
CVE-2017-18411: Improper Input Validation
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...