7959 matches found
CVE-2017-18396
The CVE-2017-18396 issue affects cPanel before 68.0.15, where Exim vdomainaliases enables arbitrary file-read operations. Root cause: improper handling in vdomainaliases leads to access to restricted files. Impact: potential disclosure of sensitive data on affected systems. Evidence from Red Hat ...
Dedecms backend has arbitrary file reading vulnerability
Dream Content Management System DedeCMS is a PHP open source website management system. Dedecms backend exists arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...
CVE-2016-10815
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...
CVE-2016-10815
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...
Design/Logic Flaw
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...
CVE-2016-10815
CVE-2016-10815 affects cPanel prior to 57.9999.54, enabling arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120). The vulnerability stems from insufficient access controls in the Branding APIs, allowing an attacker to read files on behalf of Webmail users. No exploitati...
CVE-2016-10815
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
CVE-2016-10829
cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error SEC-99...
Design/Logic Flaw
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
CVE-2016-10829
The vulnerability CVE-2016-10829 affects cPanel before 55.9999.141. A multipart form processing error (SEC-99) allows arbitrary file-read operations via the affected web interface. Root cause: improper handling of multipart form data enabling unauthorized file reads. Impact: confidentiality of fi...
CVE-2016-10847
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
CVE-2016-10836
cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...
CVE-2016-10838
cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script SEC-70...
CVE-2016-10836
cPanel before 55.9999.141 allows arbitrary file-read operations during authentication with caldav SEC-108...
CVE-2016-10838
cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script SEC-70...
Design/Logic Flaw
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads SEC-378...