CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

EUVD-2016-1794

Malware in sbrugna...

EUVD-2019-5612

Malware in sbrugna...

EUVD-2017-9551

Malware in sbrugna...

EUVD-2006-6506

Malware in sbrugna...

CVE-2019-14406

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

CVE-2017-18435

cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...

Unspecified vulnerability in cPanel (CNVD-2019-27410)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 58.0.4. An attacker can exploit the vulnerability to perform...

CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

Code injection

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10800

Affected software: cPanel prior to 58.0.4. Vulnerability: demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). Root cause / impact: the issue allows escape in demo mode, with impact characterized as partial confidentiality/integrity/availability risk per the cited sources. Expl...

CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2017-18435

cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...

CVE-2017-18435

cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...

Code injection

cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...

CVE-2017-18435

This CVE affects cPanel before 64.0.21, where demo accounts could cause code execution via the BoxTrapper API (SEC-238). The issue is tied to the BoxTrapper API and is documented as exploitable by non-privileged, unauthenticated users, enabling remote code execution with low attacker effort. The ...

CVE-2017-18435

cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...

CVE-2019-14406

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

CVE-2019-14406

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...