CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10800

Affected software: cPanel prior to 58.0.4. Vulnerability: demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). Root cause / impact: the issue allows escape in demo mode, with impact characterized as partial confidentiality/integrity/availability risk per the cited sources. Expl...

CVE-2016-10799

cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...

CVE-2016-10799

CVE-2016-10799 affects cPanel prior to 58.0.4 where the Pear tmp directory is not set during PHP installation (SEC-137). Multiple connected sources (RH advisory, NVD entry, CNVD/Cvelist records) corroborate the parameterized description, with no explicit exploit details provided in the supplied d...

CVE-2016-10798

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

CVE-2016-10798

The CVE-2016-10798 entry applies to cPanel before 58.0.4, where the rearrangeacct functionality can change file ownership to the user account “nobody.” The issue is documented across multiple connected sources (Red Hat advisory, NVD entry, CNVD, PRION, CVE listings) and is tied to improper handli...

cPanel Information Disclosure Vulnerability (CNVD-2019-29718)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a configurati...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29632)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

CVE-2016-10811: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10808: Improper Input Validation

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

CVE-2016-10807: Improper Input Validation

cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost SEC-112...

CVE-2016-10805: Improper Input Validation

cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajaxmaketextsyntaxutil.pl SEC-109...

CVE-2016-10803: Improper Neutralization of CRLF Sequences

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

CVE-2016-10804: Improper Input Validation

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

CVE-2016-10802: Improper Access Control

cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler SEC-142...

CVE-2016-10800: Improper Input Validation

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10799: Improper Access Control

cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...

CVE-2016-10798: Concurrent Execution using Shared Resource with Improper Synchronization

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

PT-2019-7597

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue concerns improper session handling for shared users. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...

PT-2019-7595

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue is related to the Pear tmp directory not being set during a PHP installation. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...