4090 matches found
cPanel Arbitrary Code Execution Vulnerability
cPanel is a set of Web-based host control management system of the U.S. cPanel. An arbitrary code execution vulnerability exists in cPanel versions prior to 84.0.20 when using PowerDNS. The vulnerability can be exploited by an attacker via dnsadmin to execute arbitrary code as root...
cPanel Code Execution Vulnerability (CNVD-2020-18566)
cPanel is a set of Web-based host control management system of the U.S. cPanel. A code execution vulnerability exists in cPanel versions prior to 84.0.20. An attacker can exploit this vulnerability to achieve code execution via the PassengerApps API using a demo account...
CVE-2020-10120
cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell SEC-545...
CVE-2020-10121
cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...
CVE-2020-10121
cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs SEC-546...
CVE-2020-10122
cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files SEC-547...
CVE-2020-10122
cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files SEC-547...
CVE-2020-10120
cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell SEC-545...
CVE-2020-10117
cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace SEC-542...
CVE-2020-10118
cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...
CVE-2019-20496
cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing SEC-532...
CVE-2020-10115
cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. SEC-537...
CVE-2019-20495
cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming SEC-531...
CVE-2019-20494
In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers SEC-525...
CVE-2020-10116
cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls SEC-541...
CVE-2020-10116
cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls SEC-541...
CVE-2019-20495
cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming SEC-531...
CVE-2019-20498
cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect SEC-534...