CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12784

CVE-2020-12784 affects cPanel prior to 86.0.14. The issue allows remote attackers to trigger a bandwidth suspension by abusing specific mail log strings (SEC-505). Public references (NVD/Red Hat/CVE listings) corroborate a network-trajectory issue with low attack complexity and no authentication ...

Unspecified vulnerability in cPanel (CNVD-2021-37215)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18. The vulnerability can be exploited by an attacker to...

cPanel Input Validation Error Vulnerability (CNVD-2020-21072)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18, which stems from the fact that values generated ...

Unspecified vulnerability in cPanel (CNVD-2021-37214)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. No detailed vulnerability details are provided at this ti...

cPanel Remote Code Execution Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A remote code execution vulnerability exists in cPanel versions prior to 84.0.20. An attacker can exploit this vulnerability to remotely execute code as root via the cpsrvd rsync shell...

cPanel Stored Cross-Site Scripting Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A stored cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via a WHM backup restore...

cPanel Authentication Bypass Vulnerability (CNVD-2020-18549)

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 82.0.18. The vulnerability stems from inconsistent handling of Webmail usernames. An attacker can exploit this vulnerability to achieve...

cPanel cross-site scripting vulnerability (CNVD-2020-19891)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from a lack of proper...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19905)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of...

cPanel Arbitrary Database Read Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An arbitrary database read vulnerability exists in cPanel versions prior to 82.0.18. An attacker can exploit this vulnerability to read arbitrary databases via a MySQL dump stream...

cPanel WebDAV Authentication Bypass Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A WebDAV authentication bypass vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from incorrect connection sharing logic. An attacker can exploit this vulnerability to achieve WebDAV...

cPanel File Modification Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A file modification vulnerability exists in cPanel versions prior to 84.0.20. An attacker can use a demo account to exploit this vulnerability to modify files via Branding API calls...

cPanel Deactivation Restriction Bypass Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18. An attacker could exploit the vulnerability to bypass...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19904)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of proper...

cPanel Arbitrary File Deletion Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An arbitrary file deletion vulnerability exists in versions of cPanel prior to 84.0.20. An attacker can exploit this vulnerability to delete arbitrary files via webmail or demo account...

cPanel Feature and Demo Account Restriction Bypass Vulnerability

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 84.0.20. An attacker could exploit the vulnerability to...

cPanel Arbitrary Code Execution Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An arbitrary code execution vulnerability exists in cPanel versions prior to 84.0.20 when using PowerDNS. The vulnerability can be exploited by an attacker via dnsadmin to execute arbitrary code as root...

cPanel Code Execution Vulnerability (CNVD-2020-18566)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A code execution vulnerability exists in cPanel versions prior to 84.0.20. An attacker can exploit this vulnerability to achieve code execution via the PassengerApps API using a demo account...