cPanel Protection Mechanism Bypass Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A protection mechanism bypass vulnerability exists in versions of cPanel prior to 88.0.13. An attacker can exploit this vulnerability to bypass the protection mechanism that restricts package modifications...

cPanel Access Control Error Vulnerability (CNVD-2020-55176)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 88.0.3, which can be exploited by attackers to bypass the SMTP gray...

cPanel cross-site scripting vulnerability (CNVD-2020-55177)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 90.0.10, which stems from self XSS that allows editing of...

Unspecified vulnerability in cPanel (CNVD-2021-28345)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A security vulnerability exists in cPanel versions prior to 88.0.3. An attacker can exploit the vulnerability to obtain sensitive information...

Unspecified vulnerability in cPanel (CNVD-2021-28347)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A security vulnerability exists in cPanel. No detailed vulnerability details are provided at this time...

cPanel code issue vulnerability (CNVD-2020-54919)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 88.03, which stems from the incorrect handling of Exim filter paths a...

cPanel SRS Key Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A vulnerability exists in cPanel versions prior to 88.0.3 in which the template VM uses an insecure SRS key. No detailed vulnerability details are provided at this time...

cPanel Authentication Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 88.03, which stems from Dovecot's use of an insecure authentication...

cPanel File Management Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 90.0.10, which stems from a mail quota cache that allows overwriting ...

cPanel cross-site scripting vulnerability (CNVD-2020-54779)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 90.0.10, which stems from self XSS that allows the...

CVE-2020-26113

cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces SEC-569...

CVE-2020-26111

cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...

CVE-2020-26100

chsh in cPanel before 88.0.3 allows a Jailshell escape SEC-497...

CVE-2020-26101

In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

Code injection

cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution SEC-488...

EUVD-2020-18728

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26106

cPanel before 88.0.3 has weak permissions world readable for the proxy subdomains log file SEC-558...

CVE-2020-26113

CVE-2020-26113 affects cPanel before 90.0.10, with a self XSS vulnerability in the WHM Manage API Tokens interfaces (SEC-569). The weakness allows execution of client‑side code via token management UI, enabling a logged‑in attacker to potentially compromise session integrity. Public references co...

Unspecified vulnerability in cPanel (CNVD-2020-29628)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An unspecified vulnerability exists in cPanel. An attacker can exploit this vulnerability to gain access to the current working...