37 matches found
CVE-2017-18434
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
Code injection
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
CVE-2017-18434
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
Design/Logic Flaw
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
cPanel Input Validation Error Vulnerability (CNVD-2019-29615)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in the API Analytics adminbin in versions prior to cPanel 80.0.5, no detailed vulnerability detai...
CVE-2019-14409
cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...
CVE-2019-14409
cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...
CVE-2019-14396
API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
Design/Logic Flaw
cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...
Design/Logic Flaw
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
Code injection
API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...
CVE-2018-20869
CVE-2018-20869 affects cPanel before 76.0.8, where arbitrary code execution is possible in the root context via dnssec adminbin (SEC-465). Multiple sources (NVD/Red Hat/CNVD/CVE lists) confirm the flaw allowing local escalation with high impact (C/H/I/A). Affected product is cPanel; vulnerable co...
CVE-2018-20869
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...