CVE-2016-10780

CVE-2016-10780 affects cPanel prior to 60.0.25, where the ftp_sessions API is vulnerable to stored XSS due to insufficient validation of client data. The issue allows an attacker to inject and execute client-side script through the affected API, with impact described as a stored XSS condition. Ro...

CVE-2016-10779

CVE-2016-10779 affects cPanel prior to 60.0.25, with a stored XSS in api1_listautoresponders due to insufficient input validation in the web application. The vulnerability can lead to execution of client-side code in affected sessions. Remediation: upgrade to version 60.0.25 or later (as noted in...

CVE-2016-10779

cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...

CVE-2016-10777

cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...

CVE-2016-10777

Summary of CVE-2016-10777 : The vulnerability affects cPanel before 60.0.25 and is described as a self‑XSS in the WHM Tweak Settings for the parameter autodiscover_host (SEC-177). The issue originates from insufficient input handling in the affected web interface, enabling an attacker to cause cl...

CVE-2016-10778

CVE-2016-10778 affects cPanel before 60.0.25, with a stored XSS in the listftpstable API (SEC-178). The root cause cited is lack of proper validation of client data, enabling attacker-controlled scripts to execute in the victim’s browser. Consequences described are client-side code execution; no ...

CVE-2016-10778

cPanel before 60.0.25 allows self stored XSS in the listftpstable API SEC-178...

CVE-2016-10776

CVE-2016-10776 affects cPanel before 60.0.25, enabling stored XSS during the homedir removal phase of WHM Account termination (SEC-174). Root cause is improper handling/validation of user-supplied data in the web interface during account termination, allowing injected scripts to be stored and pot...

CVE-2016-10776

cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination SEC-174...

cPanel Information Disclosure Vulnerability (CNVD-2019-26213)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 66.0.2. The vulnerability stems from an error such ...

cPanel Code Execution Vulnerability (CNVD-2019-26336)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker exploited the vulnerability to execute...

cPanel Code Execution Vulnerability (CNVD-2019-26334)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 64.0.21. An attacker can exploit the vulnerability to execute code...

cPanel Code Execution Vulnerability (CNVD-2019-26349)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 62.0.17. An attacker can exploit this vulnerability to execu...

cPanel path traversal vulnerability (CNVD-2019-26341)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 64.0.21. The vulnerability stems from a failure of a network...

cPanel Information Disclosure Vulnerability (CNVD-2019-26346)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 64.0.21. An attacker can exploit the vulnerability to...

cPanel Code Execution Vulnerability (CNVD-2019-26340)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker can exploit the vulnerability to execut...

cPanel cross-site scripting vulnerability (CNVD-2019-26163)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 74.0.8. The vulnerability stems from a lack of proper...

cPanel Code Execution Vulnerability (CNVD-2019-26335)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker can exploit the vulnerability to execut...

cPanel cross-site scripting vulnerability (CNVD-2019-26208)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 66.0.2. The vulnerability stems from a lack of proper...

cPanel Information Disclosure Vulnerability (CNVD-2019-26214)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 66.0.2. The vulnerability stems from an error in th...