CVE-2020-26114

CVE-2020-26114 (cPanel before 90.0.10) is documented as a self XSS vulnerability in the Cron Jobs interface (SEC-573). The vulnerability affects cPanel’s web-based admin UI, enabling self-derived XSS via cron job input handling. Multiple connected sources consistently describe the same issue; no ...

CVE-2020-26114

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

CVE-2020-26115

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26115

CVE-2020-26115 affects cPanel prior to 90.0.10. The issue is a self XSS via the Cron Editor interface (SEC-574). Affected product: cPanel web-based platform; vulnerability originates from improper handling in the Cron Editor, enabling a user-supplied payload to execute in the context of the admin...

CVE-2020-26102: Undefined Security Weakness

In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM SEC-550...

CVE-2020-26100: Undefined Security Weakness

chsh in cPanel before 88.0.3 allows a Jailshell escape SEC-497...

CVE-2020-26107: Use of Insufficiently Random Values

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

CVE-2020-26110: Improper Neutralization of Input During Web Page Generation

cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces SEC-564...

CVE-2020-26112: Undefined Security Weakness

The email quota cache in cPanel before 90.0.10 allows overwriting of files...

CVE-2020-26114: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.10 allows self XSS via the Cron Jobs interface SEC-573...

PT-2020-16289

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.3 Description The issue is related to weak permissions for the proxy subdomains log file, making it world readable. Recommendations For versions prior to 88.0.3, update to version 88.0.3 or later to resolve the...

PT-2020-16293

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue allows for self XSS via DNS Zone Manager DNSSEC interfaces. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve the issue...

PT-2020-16295

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.10 Description The issue concerns the email quota cache in cPanel, which allows overwriting of files. Recommendations For versions prior to 90.0.10, update to version 90.0.10 or later to resolve the issue...

PT-2020-16283

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.3 Description The issue allows a Jailshell escape. Recommendations For versions prior to 88.0.3, update to version 88.0.3 or later to resolve the issue...

PT-2020-16292

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue allows bypass of a protection mechanism that attempted to restrict package modification. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve the...

PT-2020-16297

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.10 Description The issue allows self XSS via the Cron Jobs interface. Recommendations For versions prior to 90.0.10, update to version 90.0.10 or later to resolve the issue...

PT-2020-16290

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.3 Description The issue concerns the establishment of predictable PowerDNS API keys upon an upgrade. Recommendations For versions prior to 88.0.3, update to version 88.0.3 or later to resolve the issue...

CVE-2020-26115: Improper Neutralization of Input During Web Page Generation

cPanel before 90.0.10 allows self XSS via the Cron Editor interface SEC-574...

CVE-2020-26104: Insecure Storage of Sensitive Information

In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM SEC-552...

PT-2020-16294

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 90.0.10 Description The issue allows self XSS via the WHM Edit DNS Zone interface. Recommendations For versions prior to 90.0.10, update to version 90.0.10 or later to resolve the issue...