Unspecified vulnerability in cPanel (CNVD-2021-37215)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18. The vulnerability can be exploited by an attacker to...

Unspecified vulnerability in cPanel (CNVD-2021-37214)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. No detailed vulnerability details are provided at this ti...

cPanel cross-site scripting vulnerability (CNVD-2020-19891)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from a lack of proper...

cPanel Authentication Bypass Vulnerability (CNVD-2020-18549)

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 82.0.18. The vulnerability stems from inconsistent handling of Webmail usernames. An attacker can exploit this vulnerability to achieve...

cPanel Deactivation Restriction Bypass Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18. An attacker could exploit the vulnerability to bypass...

cPanel Feature and Demo Account Restriction Bypass Vulnerability

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. An attacker could exploit the vulnerability to...

cPanel Arbitrary File Deletion Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An arbitrary file deletion vulnerability exists in versions of cPanel prior to 84.0.20. An attacker can exploit this vulnerability to delete arbitrary files via webmail or demo account...

CVE-2020-10120

cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell SEC-545...

CVE-2020-10122

cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files SEC-547...

CVE-2019-20495

cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming SEC-531...

CVE-2019-20497

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...

CVE-2020-10114

cPanel before 84.0.20 allows stored self-XSS via the HTML file editor SEC-535...

CVE-2020-10113

cPanel before 84.0.20 allows self XSS via a temporary character-set specification SEC-515...

CVE-2020-10113

cPanel before 84.0.20 allows self XSS via a temporary character-set specification SEC-515...

Code injection

cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...

CVE-2019-20491

cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions SEC-508...

cPanel Authorization Issues Vulnerability (CNVD-2020-03746)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 70.0.23. No detailed vulnerability details are provided at this ti...

cPanel Input Validation Error Vulnerability (CNVD-2020-03742)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 70.0.23. The vulnerability stems from a web-based...

cPanel code issue vulnerability (CNVD-2020-03740)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 70.0.23. An attacker can exploit the vulnerability to elevate...

cPanel code issue vulnerability (CNVD-2020-58052)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A code issue vulnerability exists in cPanel versions prior to 82.0.15. The vulnerability stems from an improperly design...