5281 matches found
PT-2021-22232
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 96.0.8 Description The issue is related to weak permissions on web stats, which can lead to information disclosure. Recommendations For versions prior to 96.0.8, update to version 96.0.8 or later to resolve the issue...
Cpanel security feature vulnerabilities
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel that stems from the script fix-cpanel-perl not properly restricting file...
Cpanel information leakage vulnerability
cPanel is a set of Web-based host control management system of the U.S. cPanel. An information disclosure vulnerability exists in cPanel versions prior to 96.0.8. The vulnerability stems from weak privileges on web statistics. An attacker can exploit this vulnerability to obtain information...
Cpanel race condition issue
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A competitive conditions issue vulnerability exists in cPanel prior to 96.0.13, which stems from the script...
cPanel security vulnerabilities
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel that stems from a lack of validation of the integrity of downloads in...
Cpanel code-related vulnerabilities
cPanel is a web-based host control management system from cPanel USA. cPanel versions prior to 98.0.1 have an XXE vulnerability in the WHM Locale Upload feature. No detailed vulnerability details are currently available...
Cpanel code-related vulnerabilities
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 98.0.1, which can be exploited to perform a...
PT-2021-22231
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 96.0.13 Description The issue arises from the improper restriction of file overwriting by the scripts/fix-cpanel-perl in cPanel. This allows for potential unauthorized modifications to files. Recommendations For versio...
Cpanel security feature vulnerabilities
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 98.0.1. There is no information about this vulnerabilit...
cPanel cross-site scripting vulnerability (CNVD-2021-31749)
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 94.0.3. The vulnerability stems from saving...
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
Design/Logic Flaw
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2021-31803
CVE-2021-31803 affects cPanel prior to 94.0.3, enabling a self‑XSS via the EasyApache 4 Save Profile (SEC-581). The issue lies in saving a configuration file without adequately filtering user input, allowing an attacker to inject JavaScript. Affected component/flow is the EasyApache 4 Save Profil...
PT-2021-19517
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 94.0.3 Description The issue allows self-XSS via EasyApache 4 Save Profile. Recommendations For versions prior to 94.0.3, update to version 94.0.3 or later to resolve the issue...
CVE-2021-31803: Improper Neutralization of Input During Web Page Generation
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
Cpanel Cross-Site Script Vulnerabilities
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 94.0.3. The vulnerability stems from saving...