CVE-2016-10806

CVE-2016-10806 affects cPanel prior to 57.9999.54 and enables self XSS on the Paper Lantern Landing Page (SEC-110). The available documents consistently describe the issue as a self XSS vulnerability, with no explicit exploit details or additional impact described beyond what is stated. No remedi...

CVE-2016-10806

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...

CVE-2016-10805

cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajaxmaketextsyntaxutil.pl SEC-109...

CVE-2016-10805

CVE-2016-10805 affects cPanel versions prior to 57.9999.54. The issue allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109), enabling remote code execution with the potential for full control under the public-facing web interface. According to connected sources...

CVE-2016-10804

The CVE-2016-10804 issue affects cPanel prior to 57.9999.54, where the SQLite journal feature can cause arbitrary file overwrites during Horde Restore (SEC-58). Root cause: misuse of the SQLite journal leads to write operations to arbitrary files. Impact (per sources): High, with potential confid...

CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

CVE-2016-10803

CVE-2016-10803 affects cPanel prior to 57.9999.105, where newline injection is possible via LOC records (CPANEL-6923). Public source notes from multiple catalogs confirm the issue and identify the vulnerable version range. The Red Hat entry and CNVD/CVE records consistently reference the same CPA...

CVE-2016-10803

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

CVE-2016-10802

CVE-2016-10802 affects cPanel prior to 58.0.4, allowing code execution in the context of other user accounts through the PHP CGI handler (SEC-142). Connected sources confirm the vendor advisory and a fixed version (58.0.4); no exploitation details are provided in the documents. Recommended action...

CVE-2016-10802

cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler SEC-142...

CVE-2016-10801

Affected product: cPanel. Vulnerability CVE-2016-10801 exists in versions before 58.0.4 due to improper session handling for shared users (SEC-139). Root cause: flawed session management in the system. Impact described by CVSS3 as high (C/H/I/A) with base score 8.8; CVSS2 as 6.5. Mitigation: upgr...

CVE-2016-10801

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10800

Affected software: cPanel prior to 58.0.4. Vulnerability: demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138). Root cause / impact: the issue allows escape in demo mode, with impact characterized as partial confidentiality/integrity/availability risk per the cited sources. Expl...

CVE-2016-10799

CVE-2016-10799 affects cPanel prior to 58.0.4 where the Pear tmp directory is not set during PHP installation (SEC-137). Multiple connected sources (RH advisory, NVD entry, CNVD/Cvelist records) corroborate the parameterized description, with no explicit exploit details provided in the supplied d...

CVE-2016-10799

cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...

CVE-2016-10798

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

CVE-2016-10798

The CVE-2016-10798 entry applies to cPanel before 58.0.4, where the rearrangeacct functionality can change file ownership to the user account “nobody.” The issue is documented across multiple connected sources (Red Hat advisory, NVD entry, CNVD, PRION, CVE listings) and is tied to improper handli...

CVE-2016-10808: Improper Input Validation

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

PT-2019-7599

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.105 Description The issue allows newline injection via LOC records. Recommendations For versions prior to 57.9999.105, update to version 57.9999.105 or later to resolve the issue...