4088 matches found
CVE-2017-18407
CVE-2017-18407 affects cPanel before 67.9999.103, where SSL hostname verification is not enforced for the support‑agreement download (SEC-279). This is the concrete vulnerability described across multiple connected records. The available documents do not provide exploit details, impact specifics ...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18406
cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...
CVE-2017-18406
CVE-2017-18406 affects cPanel prior to 67.9999.103, where eximstats processing allows SQL injection due to lack of input validation of external SQL statements in database-based components. The issue is documented across multiple sources (e.g., Red Hat, CNVD, NVD); CVSS3 base score is 7.5 (HIGH) w...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18385
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...
CVE-2017-18383
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...
CVE-2017-18390
cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups SEC-322...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18388
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
CVE-2017-18389
cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...
CVE-2017-18388
cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask SEC-315...
CVE-2017-18389
cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...
CVE-2017-18385
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18383
cPanel before 68.0.15 writes home-directory backups to an incorrect location SEC-309...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...