CVE-2016-10811

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10810

Summary: CVE-2016-10810 affects cPanel prior to 57.9999.54, where the script /scripts/maildir_converter exposes a TTY to an unprivileged process (SEC‑115). The issue is documented across multiple sources (NVD entry and Red Hat, CNVD, etc.). Impact details: CVSS metrics in the NVD entry indicate a...

CVE-2016-10810

In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...

CVE-2016-10809

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

CVE-2016-10809

CVE-2016-10809 : In cPanel before 57.9999.54, the script path /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114). This creates a high-risk exposure for confidentiality, integrity, and availability per the CVSS metrics, with an attack vector of network and low complexity. T...

CVE-2016-10808

CVE-2016-10808 affects cPanel prior to 57.9999.54. The endpoints /scripts/addpop and /scripts/delpop expose TTYs (SEC-113), enabling potential attacker access with high impact on confidentiality, integrity, and availability (CVSSv3 base score 8.8). No remediation details are provided in the suppl...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

CVE-2016-10807

The CVE-2016-10807 entry affects cPanel prior to 57.9999.54. Affected component is the cPanel web management platform, with the root cause described as an input validation issue. Successful exploitation can lead to denial-of-service outcomes via the /scripts/killpvhost endpoint. Public references...

CVE-2016-10807

cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost SEC-112...

CVE-2016-10806

CVE-2016-10806 affects cPanel prior to 57.9999.54 and enables self XSS on the Paper Lantern Landing Page (SEC-110). The available documents consistently describe the issue as a self XSS vulnerability, with no explicit exploit details or additional impact described beyond what is stated. No remedi...

CVE-2016-10806

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10805

cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajaxmaketextsyntaxutil.pl SEC-109...

CVE-2016-10805

CVE-2016-10805 affects cPanel versions prior to 57.9999.54. The issue allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109), enabling remote code execution with the potential for full control under the public-facing web interface. According to connected sources...

CVE-2016-10804

The CVE-2016-10804 issue affects cPanel prior to 57.9999.54, where the SQLite journal feature can cause arbitrary file overwrites during Horde Restore (SEC-58). Root cause: misuse of the SQLite journal leads to write operations to arbitrary files. Impact (per sources): High, with potential confid...

CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

CVE-2016-10803

CVE-2016-10803 affects cPanel prior to 57.9999.105, where newline injection is possible via LOC records (CPANEL-6923). Public source notes from multiple catalogs confirm the issue and identify the vulnerable version range. The Red Hat entry and CNVD/CVE records consistently reference the same CPA...

CVE-2016-10803

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

CVE-2016-10802

CVE-2016-10802 affects cPanel prior to 58.0.4, allowing code execution in the context of other user accounts through the PHP CGI handler (SEC-142). Connected sources confirm the vendor advisory and a fixed version (58.0.4); no exploitation details are provided in the documents. Recommended action...

CVE-2016-10802

cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler SEC-142...

CVE-2016-10801

Affected product: cPanel. Vulnerability CVE-2016-10801 exists in versions before 58.0.4 due to improper session handling for shared users (SEC-139). Root cause: flawed session management in the system. Impact described by CVSS3 as high (C/H/I/A) with base score 8.8; CVSS2 as 6.5. Mitigation: upgr...