Code injection

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...

Design/Logic Flaw

cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...

Design/Logic Flaw

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

Design/Logic Flaw

cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...

CVE-2019-17380

CVE-2019-17380 affects cPanel's WHM Update Preferences interface, where versions prior to 82.0.15 are vulnerable to a self‑XSS due to lack of proper validation of client‑side data. The issue arises within the WHM Update Preferences UI and can lead to execution of client‑side code, as described ac...

CVE-2019-17380

cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...

CVE-2019-17379

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

CVE-2019-17379

CVE-2019-17379 affects cPanel before 82.0.15, introducing a self-stored XSS in the WHM SSL Storage Manager interface. The underlying issue is lack of proper validation of client-side data in the web application, enabling an attacker to inject and execute script through stored input. Impact per so...

CVE-2019-17378

cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...

CVE-2019-17378

CVE-2019-17378 affects cPanel prior to 82.0.15, where the SSL Key Delete interface is vulnerable to self XSS (SEC-526). The issue originates from inadequate input validation on a client-side operation, enabling injection of script in the SSL Key Delete flow. Impact is described as a self XSS vuln...

CVE-2019-17377

The CVE-2019-17377 issue affects cPanel prior to 82.0.15, where the LiveAPI sample scripts are vulnerable to self-XSS due to insufficient validation of client‑side data in the web application. Exploitation could allow an attacker to execute arbitrary client-side code within affected sessions. Rem...

CVE-2019-17377

cPanel before 82.0.15 allows self XSS in LiveAPI example scripts SEC-524...

CVE-2019-17376

cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...

CVE-2019-17376

CVE-2019-17376 affects cPanel prior to 82.0.15, where the SSL Certificate Upload interface is vulnerable to self-XSS due to insufficient validation in client-side data handling. Multiple sources confirm the flaw exists in the SSL Certificate Upload feature and is tied to versions older than 82.0....

CVE-2019-17375

CVE-2019-17375 affects cPanel prior to 82.0.15. The vulnerability allows API token credentials to persist after an account is renamed or terminated (SEC-517). Impact includes persistence of credentials that may enable access after account changes, with CVSS v3.1 base score high (8.8) and CVSS v2 ...

CVE-2019-17375

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...

cPanel cross-site scripting vulnerability (CNVD-2019-33879)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel. An attacker can exploit this vulnerability to execute client-side code...

cPanel Input Validation Error Vulnerability (CNVD-2019-29015)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 55.9999.141. The vulnerability stems from a lack of...

cPanel cross-site scripting vulnerability (CNVD-2019-29016)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in X3 Reseller Branding Images in versions prior to cPanel 55.9999.141. The...

cPanel Authorization Issues Vulnerability (CNVD-2019-28997)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 55.9999.141. An attacker can exploit this vulnerability to bypass the...