CVE-2020-26106

cPanel before 88.0.3 has weak permissions world readable for the proxy subdomains log file SEC-558...

CVE-2020-26113

CVE-2020-26113 affects cPanel before 90.0.10, with a self XSS vulnerability in the WHM Manage API Tokens interfaces (SEC-569). The weakness allows execution of client‑side code via token management UI, enabling a logged‑in attacker to potentially compromise session integrity. Public references co...

Unspecified vulnerability in cPanel (CNVD-2020-29628)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An unspecified vulnerability exists in cPanel. An attacker can exploit this vulnerability to gain access to the current working...

Unspecified vulnerability in cPanel (CNVD-2021-37215)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18. The vulnerability can be exploited by an attacker to...

Unspecified vulnerability in cPanel (CNVD-2021-37214)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. No detailed vulnerability details are provided at this ti...

cPanel cross-site scripting vulnerability (CNVD-2020-19891)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from a lack of proper...

cPanel Authentication Bypass Vulnerability (CNVD-2020-18549)

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 82.0.18. The vulnerability stems from inconsistent handling of Webmail usernames. An attacker can exploit this vulnerability to achieve...

cPanel Deactivation Restriction Bypass Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18. An attacker could exploit the vulnerability to bypass...

cPanel Arbitrary File Deletion Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An arbitrary file deletion vulnerability exists in versions of cPanel prior to 84.0.20. An attacker can exploit this vulnerability to delete arbitrary files via webmail or demo account...

cPanel Feature and Demo Account Restriction Bypass Vulnerability

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. An attacker could exploit the vulnerability to...

CVE-2020-10120

cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell SEC-545...

CVE-2020-10122

cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files SEC-547...

CVE-2019-20495

cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming SEC-531...

CVE-2019-20497

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...

CVE-2020-10113

cPanel before 84.0.20 allows self XSS via a temporary character-set specification SEC-515...

CVE-2020-10114

cPanel before 84.0.20 allows stored self-XSS via the HTML file editor SEC-535...

CVE-2020-10113

cPanel before 84.0.20 allows self XSS via a temporary character-set specification SEC-515...

Code injection

cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...

CVE-2019-20491

cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions SEC-508...

cPanel Authorization Issues Vulnerability (CNVD-2020-03746)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 70.0.23. No detailed vulnerability details are provided at this ti...