CVE-2016-10801

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10800

Affected software: cPanel prior to 58.0.4. Vulnerability: demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). Root cause / impact: the issue allows escape in demo mode, with impact characterized as partial confidentiality/integrity/availability risk per the cited sources. Expl...

CVE-2016-10799

CVE-2016-10799 affects cPanel prior to 58.0.4 where the Pear tmp directory is not set during PHP installation (SEC-137). Multiple connected sources (RH advisory, NVD entry, CNVD/Cvelist records) corroborate the parameterized description, with no explicit exploit details provided in the supplied d...

CVE-2016-10799

cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...

CVE-2016-10798

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

CVE-2016-10798

The CVE-2016-10798 entry applies to cPanel before 58.0.4, where the rearrangeacct functionality can change file ownership to the user account “nobody.” The issue is documented across multiple connected sources (Red Hat advisory, NVD entry, CNVD, PRION, CVE listings) and is tied to improper handli...

cPanel Input Validation Error Vulnerability (CNVD-2019-27604)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 60.0.25. An attacker can exploit the vulnerability to arbitrarily...

cPanel Input Validation Error Vulnerability (CNVD-2019-27603)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 60.0.25. The vulnerability stems from a web-based...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29623)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 60.0.25 that stems from the program not enforcing feature list...

cPanel Formatting String Error Vulnerability (CNVD-2019-33873)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A formatting string error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

cPanel cross-site scripting vulnerability (CNVD-2019-30472)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the tailea4migration.cgi interface in cPanel versions prior to 60.0.25. T...

cPanel cross-site scripting vulnerability (CNVD-2019-30461)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 68.0.15. The vulnerability stems from a lack of proper...

cPanel Information Disclosure Vulnerability (CNVD-2019-29718)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a configurati...

cPanel cross-site scripting vulnerability (CNVD-2019-30464)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the reset password interface in versions prior to cPanel 62.0.4. The vulnerability...

cPanel cross-site scripting vulnerability (CNVD-2019-30463)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the Webmail Password and Security page in versions prior to cPanel 62.0.4. The...

cPanel cross-site scripting vulnerability (CNVD-2019-30462)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Account Suspension List interface in versions prior to cPanel 62.0.4. The...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29632)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29624)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at th...

Unspecified vulnerability in cPanel (CNVD-2019-27423)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to execute code wi...