5323 matches found
cPanel Input Validation Error Vulnerability (CNVD-2019-29604)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15, which stems from the program allowing user accounts to be...
cPanel Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-29608)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15, which stems from the program writing backup files o...
cPanel Injection Vulnerability (CNVD-2019-29634)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to execute...
cPanel Trust Management Issues Vulnerability (CNVD-2019-29631)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...
cPanel Input Validation Error Vulnerability (CNVD-2019-29626)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 60.0.25. An attacker could exploit the vulnerability to...
cPanel Input Validation Error Vulnerability (CNVD-2019-29629)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 60.0.25. The vulnerability can be exploited to create files and chang...
cPanel Input Validation Error Vulnerability (CNVD-2019-29628)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to execute code wi...
Unspecified vulnerability in cPanel (CNVD-2019-27420)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 60.0.25. An attacker can exploit the vulnerability to overwrite...
Unspecified vulnerability in cPanel (CNVD-2019-27422)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to access restrict...
Unspecified vulnerability in cPanel (CNVD-2019-27424)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.17. No detailed vulnerability details are provided at this time...
PT-2019-7608
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue exposes TTYs through the /scripts/enablefileprotect endpoint. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...
PT-2019-7602
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows self XSS on the Paper Lantern Landing Page. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...
PT-2019-7597
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue concerns improper session handling for shared users. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...
PT-2019-7603
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows for certain denial-of-service outcomes. This can be achieved via the "/scripts/killpvhost" API endpoint. Recommendations For versions prior to 57.9999.54, update to version...
PT-2019-7604
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue affects cPanel, where the "/scripts/addpop" and "/scripts/delpop" API endpoints exposed TTYs. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to...
PT-2019-7607
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue affects the /scripts/unsuspendacct endpoint, exposing TTYs. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...
PT-2019-7606
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue concerns the exposure of a TTY to an unprivileged process through the /scripts/maildir converter endpoint. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54...
CVE-2016-10811: Exposure of Sensitive Information to an Unauthorized Actor
In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...
CVE-2016-10809: Exposure of Sensitive Information to an Unauthorized Actor
In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...