CVE-2018-20897

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

CVE-2018-20899

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

Code injection

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...

Design/Logic Flaw

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

Design/Logic Flaw

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

Security feature bypass

cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...

CVE-2018-20899

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

CVE-2018-20899

CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...

CVE-2018-20898

cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...

CVE-2018-20898

CVE-2018-20898 affects cPanel before 71.9980.37, where e-mail injection is possible during cPAddons moderation (SEC-396). Multiple connected records (NVD, Red Hat, PRION) corroborate the vendor-facing nature of the issue and the same description. The available documents do not provide exploit cod...

CVE-2018-20897

CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...

CVE-2018-20896

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...