PT-2019-7599

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.105 Description The issue allows newline injection via LOC records. Recommendations For versions prior to 57.9999.105, update to version 57.9999.105 or later to resolve the issue...

PT-2019-7594

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue allows for a file-ownership change to nobody via the rearrangeacct function. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...

PT-2019-7595

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue is related to the Pear tmp directory not being set during a PHP installation. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...

PT-2019-7600

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue concerns the SQLite journal feature in cPanel, allowing arbitrary file-overwrite operations during Horde Restore. Recommendations For versions prior to 57.9999.54, update to version...

cPanel Formatting String Error Vulnerability (CNVD-2019-33873)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A formatting string error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

cPanel cross-site scripting vulnerability (CNVD-2019-30473)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM MySQL Password Change interface in versions prior to cPanel 67.9999.103. T...

cPanel cross-site scripting vulnerability (CNVD-2019-30461)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 68.0.15. The vulnerability stems from a lack of proper...

cPanel path traversal vulnerability (CNVD-2019-30465)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a failure of a network...

cPanel path traversal vulnerability (CNVD-2019-30467)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a failure of a network...

cPanel cross-site scripting vulnerability (CNVD-2019-30462)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Account Suspension List interface in versions prior to cPanel 62.0.4. The...

cPanel cross-site scripting vulnerability (CNVD-2019-30463)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the Webmail Password and Security page in versions prior to cPanel 62.0.4. The...

cPanel cross-site scripting vulnerability (CNVD-2019-30464)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the reset password interface in versions prior to cPanel 62.0.4. The vulnerability...

cPanel cross-site scripting vulnerability (CNVD-2019-30472)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the tailea4migration.cgi interface in cPanel versions prior to 60.0.25. T...

cPanel Input Validation Error Vulnerability (CNVD-2019-29610)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 67.9999.103 that stems from the program not properly filtering...

cPanel Information Disclosure Vulnerability (CNVD-2019-29716)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from an...

cPanel Authorization Issues Vulnerability (CNVD-2019-29611)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from a lack...

cPanel Information Disclosure Vulnerability (CNVD-2019-29718)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a configurati...

cPanel Authorization Issues Vulnerability (CNVD-2019-29606)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. The security vulnerability in cPanel versions prior to 68.0.15 stems from the program assigning weak privileges for...

cPanel Security Feature Issue Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29633)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4 that stems from Leech Protect not protecting some...