4088 matches found
CVE-2016-10858
cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-64...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2016-10824
cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-90...
CVE-2016-10806
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...
CVE-2018-20903
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2017-18444
cPanel before 64.0.21 allows demo accounts to execute SSH API commands SEC-248...
CVE-2018-20880
cPanel before 74.0.8 mishandles account suspension because of an invalid emailaccounts.json file SEC-445...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18453
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
CVE-2017-18445
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...
CVE-2017-18408
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...
CVE-2018-20890
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
CVE-2017-18401
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats SEC-334...
CVE-2018-20883
cPanel before 74.0.8 allows FTP access during account suspension SEC-449...
CVE-2018-20900
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...
CVE-2016-10850
cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost SEC-83...
CVE-2016-10849
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...