5281 matches found
CVE-2020-29472: Improper Neutralization of Special Elements used in an SQL Command
EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...
PT-2020-17173
Name of the Vulnerable Software and Affected Versions EGavilan Media Under Construction page with cPanel version 1.0 Description The issue allows an attacker to gain Admin Panel access using malicious SQL injection queries, potentially leading to remote arbitrary code execution. This can be...
Cpanel Security Breach
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. Additional vulnerabilities exist in Cpanel. No information about this vulnerability is available at this time, plea...
EgavilanMedia Address Book 1.0 SQL Injection
Exploit Title: EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass Date: 02-12-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/egm-address-book/ Version: 1.0 Tested on: PopOS Attack Vector: An attacker can gain...
EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass
Exploit Title: EgavilanMedia Address Book 1.0 Exploit - SQLi Auth Bypass Date: 02-12-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/egm-address-book/ Version: 1.0 Tested on: PopOS Attack Vector: An attacker can gain...
Under Construction Page With CPanel 1.0 SQL Injection
Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection Date: 17-11-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/under-construction-page-with-cpanel/ Version: 1.0 Tested on: PopOS SQL Injection: SQL...
Under Construction Page with CPanel 1.0 - SQL injection
Exploit Title: Under Construction Page with CPanel 1.0 - SQL injection Date: 17-11-2020 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: http://egavilanmedia.com Software Link : http://egavilanmedia.com/under-construction-page-with-cpanel/ Version: 1.0 Tested on: PopOS SQL Injection: SQL...
Vulnerability allowed bypassing 2FA in WHM & cPanel by bruteforcing
By Sudais Asif The vulnerability CVE-2020-27641 allowed malicious actors to bypass two-factor authentication 2FA on the software using brute-force attacks. This is a post from HackRead.com Read the original post: Vulnerability allowed bypassing 2FA in WHM & cPanel by bruteforcing...
CVE-2020-29137
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
CVE-2020-29136
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29136
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29137
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
Code injection
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
Design/Logic Flaw
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
Design/Logic Flaw
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29136
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29136
CVE-2020-29136 affects cPanel versions prior to 90.0.17, where an authentication bypass allows 2FA to be defeated via brute-force (SEC-575). Root cause: improper enforcement of multi-factor authentication during brute-force attempts. Impact: unauthorized access by bypassing 2FA; exploitation stat...