4088 matches found
CVE-2017-18442
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...
CVE-2017-18441
cPanel before 64.0.21 allows demo accounts to redirect web traffic SEC-245...
CVE-2017-18441
cPanel before 64.0.21 is affected. Across multiple sources, the vulnerability is described as an input validation error in cPanel prior to 64.0.21 that allows a demo account to redirect web traffic (SEC-245). The Red Hat/Cnvd entries confirm the same flaw and tie it to versions pre-64.0.21, with ...
CVE-2017-18440
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
CVE-2017-18440
CVE-2017-18440 affects cPanel prior to 64.0.21. The vulnerability allows demo users to execute traceroute via the api2 interface (SEC-244). Impact is limited to information collection via traceroute; no broader impact is stated. Remediation is to upgrade to cPanel 64.0.21 or later, or apply provi...
CVE-2017-18439
CVE-2017-18439 affects cPanel before 64.0.21. A demo account can trigger code execution via the ImageManager_dimensions API call (SEC-243). The remedial version is 64.0.21 or later. Additional references corroborate the issue across multiple advisories.
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
CVE-2017-18435
cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...
CVE-2017-18435
cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API SEC-238...
CVE-2017-18433
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...
CVE-2017-18434
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
CVE-2017-18428
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...
CVE-2017-18430
In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassignpostterminatecruft SEC-294...
CVE-2017-18431
cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts CPANEL-13941...
CVE-2017-18423
In cPanel before 66.0.2, domain log files become readable after log processing SEC-273...
CVE-2017-18424
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...
CVE-2017-18425
In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions SEC-280...
CVE-2017-18426
cPanel before 66.0.2 allows resellers to read other accounts' domain log files SEC-288...