CentOS Web Panel Operating System Command Injection Vulnerability (CNVD-2020-44599)

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxmigrationcpanel.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from a failure to properly validate user-supplied strings before executing system...

CentOS Web Panel Operating System Command Injection Vulnerability (CNVD-2020-44596)

CentOS Web Panel CWP is a free web hosting control panel. An operating system command injection vulnerability exists in the ajaxmigrationcpanel.php file in the CentOS Web Panel cwp-el7-0.9.8.891 release, which stems from a failure to properly validate user-supplied strings before executing system...

CVE-2020-15432

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmigrationcpanel.php. When parsing the filespace parameter, the...

CVE-2020-15426

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmigrationcpanel.php. When parsing the serverip parameter, the...

Carina - Webshell, Virtual Private Server (VPS) And cPanel Database

Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Screenshots Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compose...

Unspecified vulnerability in cPanel (CNVD-2020-29628)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An unspecified vulnerability exists in cPanel. An attacker can exploit this vulnerability to gain access to the current working...

cPanel Input Validation Error Vulnerability (CNVD-2020-29627)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. An attacker could exploit this vulnerability to cause a denial of servi...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

Design/Logic Flaw

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

Information disclosure

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

CVE-2020-12785

CVE-2020-12785 affects cPanel prior to 86.0.14. The vulnerability allows an attacker to obtain access to the current working directory via the account backup feature, constituting an information-disclosure issue. The available sources consistently describe the affected product and the vulnerable ...

CVE-2020-12784

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

CVE-2020-12784

CVE-2020-12784 affects cPanel prior to 86.0.14. The issue allows remote attackers to trigger a bandwidth suspension by abusing specific mail log strings (SEC-505). Public references (NVD/Red Hat/CVE listings) corroborate a network-trajectory issue with low attack complexity and no authentication ...

CVE-2020-12784: Undefined Security Weakness

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings SEC-505...

PT-2020-13265

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 86.0.14 Description The issue allows remote attackers to trigger a bandwidth suspension via mail log strings. Recommendations For versions prior to 86.0.14, update to version 86.0.14 or later to resolve the issue...

PT-2020-13266

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 86.0.14 Description The issue allows attackers to obtain access to the current working directory via the account backup feature. Recommendations For versions prior to 86.0.14, update to version 86.0.14 or later to...