CVE-2016-10803: Improper Neutralization of CRLF Sequences

cPanel before 57.9999.105 allows newline injection via LOC records CPANEL-6923...

CVE-2016-10802: Improper Access Control

cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler SEC-142...

CVE-2016-10800: Improper Input Validation

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls SEC-138...

CVE-2016-10801: Improper Neutralization of Special Elements in Output Used by a Downstream Component

cPanel before 58.0.4 has improper session handling for shared users SEC-139...

CVE-2016-10798: Concurrent Execution using Shared Resource with Improper Synchronization

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

cPanel path traversal vulnerability (CNVD-2019-30468)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions prior to cPanel 62.0.4. The vulnerability stems from a failure of a network...

cPanel cross-site scripting vulnerability (CNVD-2019-30471)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 62.0.4. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-30470)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Repair Mailbox Permissions interface in versions prior to cPanel 60.0.25...

cPanel Information Disclosure Vulnerability (CNVD-2019-29717)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from an...

cPanel Access Control Error Vulnerability (CNVD-2019-29607)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to...

cPanel Injection Vulnerability (CNVD-2019-29635)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to execute...

cPanel Input Validation Error Vulnerability (CNVD-2019-29636)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. No detailed vulnerability details are provided at this ti...

cPanel Information Disclosure Vulnerability (CNVD-2019-29714)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4 that stems from the program not performing proper ACL...

Unspecified vulnerability in cPanel (CNVD-2019-27419)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to bypass the...

cPanel path traversal vulnerability (CNVD-2019-30469)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from a failure of a networ...

cPanel path traversal vulnerability (CNVD-2019-30466)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a failure of a network...

cPanel Information Disclosure Vulnerability (CNVD-2019-29715)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from an error in...

cPanel Access Control Error Vulnerability (CNVD-2019-29602)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker could exploit the vulnerability to delete dat...

cPanel Access Control Error Vulnerability (CNVD-2019-29603)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15. An attacker can exploit this vulnerability to execute code i...

cPanel Command Injection Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15. An attacker can exploit the vulnerability to execute code wi...