Design/Logic Flaw

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38584

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks SEC-585...

CVE-2021-38584

The CVE-2021-38584 issue affects the cPanel WHM Locale Upload feature in cPanel before 98.0.1. Root cause: an XXE vulnerability in the Locale Upload processing. Impact: XXE attacks could be triggered through the Locale Upload feature. Remediation: upgrade to cPanel 98.0.1 or later (patch mentione...

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

CVE-2021-38585

CVE-2021-38585 describes a vulnerability in the WHM Locale Upload feature of cPanel, where versions before 98.0.1 are susceptible to unserialization attacks (SEC-585). The issue stems from an unserialization flaw in the locale upload flow, enabling attackers to potentially exploit the component. ...

CVE-2021-38586

CVE-2021-38586 affects cPanel prior to 98.0.1. The issue is in /scripts/cpan_config, performing unsafe operations on files (SEC-589). The NVD metrics show CVSSv2/2.0: Low (2.1) with local access; CVSSv3.1/3.1: Medium (4.4) with local access, high integrity impact. Exploitation details or remediat...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

CVE-2021-38587

The CVE-2021-38587 entry concerns cPanel prior to 96.0.13. The affected component is the script fix-cpanel-perl, which mishandles the creation of temporary files (SEC-586). The underlying issue is a faulty handling of temporary-file creation, enabling an impact described in the sources. The publi...

CVE-2021-38587

In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files SEC-586...

CVE-2021-38588

In cPanel before 96.0.13, fixcpanelperl lacks verification of the integrity of downloads SEC-587...

CVE-2021-38588

CVE-2021-38588 affects cPanel before 96.0.13, where fix_cpanel_perl does not verify the integrity of downloads (SEC-587). Root cause: lack of integrity verification in the download process. Impacts include partial confidentiality, integrity, and availability (per CVSS) with network exposure and n...

CVE-2021-38589

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files SEC-588...

CVE-2021-38589

CVE-2021-38589 affects cPanel before 96.0.13, where scripts/fix-cpanel-perl does not properly restrict overwriting of files (SEC-588). This is a file-overwrite restriction flaw in the fix-cpanel-perl script. The vulnerability is documented across multiple sources (e.g., Red Hat advisory and NVD e...

CVE-2021-38590

CVE-2021-38590 affects cPanel before 96.0.8 where weak permissions on web statistics can lead to information disclosure (SEC-584). The vulnerability is caused by insufficient access controls on web stats, enabling local attackers to read information that should be restricted. Impact is informatio...

CVE-2021-38590

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...

Cpanel 竞争条件问题漏洞

Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A competitive conditions issue vulnerability exists in cPanel prior to 96.0.13, which stems from the script...

Cpanel 代码问题漏洞

cPanel is a web-based host control management system from cPanel USA. cPanel versions prior to 98.0.1 have an XXE vulnerability in the WHM Locale Upload feature. No detailed vulnerability details are currently available...

Cpanel 代码问题漏洞

Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 98.0.1, which can be exploited to perform a...