4088 matches found
Authentication flaw
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account SEC-101...
Cross site scripting
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task SEC-352...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups SEC-342...
Design/Logic Flaw
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
Design/Logic Flaw
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents SEC-92...
Design/Logic Flaw
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab SEC-351...
Code injection
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
Cross site scripting
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
Code injection
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script SEC-356...
Design/Logic Flaw
cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
Code injection
cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path SEC-97...
Design/Logic Flaw
cPanel before 55.9999.141 mishandles username-based blocking for PRE requests in cPHulkd SEC-104...
Design/Logic Flaw
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images SEC-88...