56 matches found
CVE-2020-10114
cPanel before 84.0.20 allows stored self-XSS via the HTML file editor SEC-535...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2016-10773
cPanel before 60.0.25 allows format-string injection in exception-message handling SEC-171...
CVE-2016-10806
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...
CVE-2016-10849
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
CVE-2020-26098
cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...
Unspecified vulnerability in cPanel (CNVD-2021-37214)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. No detailed vulnerability details are provided at this ti...
CVE-2020-10121
cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...
Design/Logic Flaw
cPanel before 84.0.20 allows self XSS via a temporary character-set specification SEC-515...
CVE-2020-10121
cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...
CVE-2016-10802
cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler SEC-142...
CVE-2016-10801
cPanel before 58.0.4 has improper session handling for shared users SEC-139...
CVE-2016-10783
cPanel before 60.0.25 allows self stored XSS in SSLlistkeys SEC-182...
cPanel cross-site scripting vulnerability (CNVD-2019-26357)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Feature Manager interface in versions prior to cPanel 11.54.0.4...
Design/Logic Flaw
In cPanel before 66.0.2, weak log-file permissions can occur after account modification SEC-289...
Cross site scripting
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...