4088 matches found
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
CVE-2018-20881
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...
CVE-2018-20916
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20897
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
CVE-2017-18480
cPanel before 62.0.4 does not enforce account ownership for hasmycnfforcpuser WHM API calls SEC-210...
CVE-2017-18431
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts CPANEL-13941...
CVE-2018-20930
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
CVE-2016-10854
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...
CVE-2018-20932
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains SEC-406...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2018-20931
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page SEC-405...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2017-18400
cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...
CVE-2019-14397
cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call SEC-496...