4088 matches found
Cross site request forgery (csrf)
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service...
UBUNTU-CVE-2022-48623
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service...
CVE-2022-48623
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service...
Cpanel::JSON::XS Security Vulnerability
Cpanel::JSON::XS is a tool for converting Perl data structures to JSON. A security vulnerability exists in the Cpanel::JSON::XS package prior to version 4.33 that could allow an attacker to obtain sensitive information or cause a denial of service DOS...
CVE-2022-48623
CVE-2022-48623 affects the Perl module perl-Cpanel-JSON-XS. The issue arises in Cpanel::JSON::XS (before 4.39-1) where out-of-bounds data handling can lead to information disclosure or a denial of service. The connected MARINER entry confirms the vulnerable range as
CVE-2022-48623
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service...
CVE-2022-48623
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service...
PT-2024-11764 · Unknown +4 · Cpanel::Json::Xs +4
Name of the Vulnerable Software and Affected Versions: Cpanel::JSON::XS versions prior to 4.33 Description: The issue allows attackers to perform out-of-bounds accesses, potentially obtaining sensitive information or causing a denial of service. Recommendations: For versions prior to 4.33, update...
CVE-2022-47532
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request...
CVE-2022-47532
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request...
PT-2023-15390 · Filerun · Filerun
Name of the Vulnerable Software and Affected Versions: FileRun version 20220519 Description: The issue allows SQL Injection via the dir parameter in a "/?module=users§ion=cpanel&page=list" API endpoint. This could potentially lead to unauthorized access to sensitive data. Recommendations: For...
Exploit for Cross-site Scripting in Cpanel
CVE-2023-29489 -...
cpanel.chennaicustoms.gov.in Cross Site Scripting vulnerability OBB-3751736
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cpanel.aircustomschennai.gov.in Cross Site Scripting vulnerability OBB-3751735
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
openSUSE 15 Security Update : perl-Cpanel-JSON-XS (openSUSE-SU-2023:0225-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0225-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
Security update for perl-Cpanel-JSON-XS (moderate)
openSUSE Security Update: Security update for perl-Cpanel-JSON-XS Announcement ID: openSUSE-SU-2023:0225-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 An update that contains security fixes can now be installed. Description: This update for perl-Cpanel-JSON-XS...
The vulnerability of the cPanel control panel for web hosting arises from the lack of protective measures for the website structure, allowing attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the cPanel control panel for web hosting exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Exploit for Cross-site Scripting in Cpanel
!logohttps://raw.githubusercontent.com/mr-sami-x/XSS1915/mai...
cpanel.codesprogram.com Cross Site Scripting vulnerability OBB-3330103
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
U.S. Dept Of Defense: CVE-2023-29489 XSS in cpanel at [www.███] - Securado, Oman
A cross-site scripting XSS vulnerability was found on the cpanel application hosted on a website. The vulnerability allowed an attacker to steal cookies or hijack a browser session. The cpanel was not updated due to the disabled auto-update feature. The vulnerability was mitigated by enabling the...