CVE-2020-29137

CVE-2020-29137 affects cPanel prior to 90.0.17, with a self‑XSS vulnerability in the WHM Transfer Tool interface (SEC-577). The issue is limited to the Transfer Tool’s UI and is triggered by user input that could execute script in the victim’s browser. Exploitation details are not provided in the...

CVE-2020-29135

cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...

CVE-2020-29135

CVE-2020-29135 affects cPanel prior to 90.0.17, with multiple instances of URL parameter injection (SEC-567). The connected records identify the affected product and the vulnerability type, but do not provide explicit exploitation details, affected components beyond the web interfaces, or a confi...

cPanel Self-XSS Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A self-XSS vulnerability exists in the "WHM Transfer Tool" interface in cPanel versions prior to 90.0.17. No details of the vulnerability are available at this time...

cPanel Authentication Bypass Vulnerability (CNVD-2021-28342)

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 90.0.17. An attacker can exploit this vulnerability to bypass authentication...

cPanel URL Parameter Injection Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A URL parameter injection vulnerability exists in multiple interfaces in versions of cPanel prior to 90.0.17. No detailed vulnerability details are provided at this time...

CVE-2020-29137: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...

PT-2020-17097

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.17 Description The issue allows self-XSS via the WHM Transfer Tool interface. Recommendations For versions prior to 90.0.17, update to version 90.0.17 or later to resolve the issue...

CVE-2020-29135: Inappropriate Encoding for Output Context

cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...

PT-2020-17095

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.17 Description The issue concerns multiple instances of URL parameter injection. Recommendations For versions prior to 90.0.17, update to version 90.0.17 or later to resolve the issue...

PT-2020-17096

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.17 Description The issue allows 2FA to be bypassed via a brute-force approach. Recommendations For versions prior to 90.0.17, update to version 90.0.17 or later to resolve the issue...

CVE-2020-29136: Improper Restriction of Excessive Authentication Attempts

In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...

cPanel injection vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A URL parameter injection vulnerability exists in multiple interfaces in versions of cPanel prior to 90.0.17. No detailed vulnerability details are provided at this time...

cPanel security vulnerabilities

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 90.0.17. An attacker can exploit this vulnerability to bypass authentication...

cPanel Cross-Site Scripting Vulnerabilities

cPanel is a set of Web-based host control management system of the U.S. cPanel. A self-XSS vulnerability exists in the "WHM Transfer Tool" interface in cPanel versions prior to 90.0.17. No details of the vulnerability are available at this time...

2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

cPanel, a provider of popular administrative tools to manage web hosting, has patched a security vulnerability that could have allowed remote attackers with access to valid credentials to bypass two-factor authentication 2FA protection on an account. The issue, tracked as "SEC-575" and discovered...

2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

cPanel, a provider of popular administrative tools to manage web hosting, has patched a security vulnerability that could have allowed remote attackers with access to valid credentials to bypass two-factor authentication 2FA protection on an account. The issue, tracked as "SEC-575" and discovered...

Unspecified vulnerability in cPanel (CNVD-2021-28345)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A security vulnerability exists in cPanel versions prior to 88.0.3. An attacker can exploit the vulnerability to obtain sensitive information...

cPanel Access Control Error Vulnerability (CNVD-2020-55176)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 88.0.3, which can be exploited by attackers to bypass the SMTP gray...

Unspecified vulnerability in cPanel (CNVD-2021-28347)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A security vulnerability exists in cPanel. No detailed vulnerability details are provided at this time...