4087 matches found
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2016-10839
CVE-2016-10839 affects cPanel prior to 11.54.0.4, where an SQL injection vulnerability exists in bin/horde_update_usernames (SEC-71). Multiple connected sources (Red Hat advisory, CNVD/CNVD-2019-26351, CVE listings) confirm the issue as a SQL injection in the cPanel component, with affected versi...
CVE-2016-10839
cPanel before 11.54.0.4 allows SQL injection in bin/hordeupdateusernames SEC-71...
CVE-2016-10840
CVE-2016-10840 affects cPanel prior to 11.54.0.4. The issue allows arbitrary code execution during locale duplication (SEC-72). Affected product: cPanel (control panel software). The vulnerability is evidenced in multiple sources, including NVD and Red Hat’s CVE listing, indicating an in-product ...
CVE-2016-10840
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...
CVE-2016-10841
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes SEC-73...
CVE-2016-10841
The CVE-2016-10841 entry concerns cPanel prior to 11.54.0.4 where the bin/mkvhostspasswd script discloses password hashes (SEC-73). Public references (NVD, Red Hat, CNVD, CVE lists) corroborate that the issue is a leakage of password hashes, not a user password exposure directly, and exploitation...
CVE-2016-10842
CVE-2016-10842 affects cPanel prior to 11.54.0.4, allowing certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). Affected software: cPanel before 11.54.0.4. Root cause: not explicitly stated beyond the file-read operation in the specified script. Impact: reads of internal file...
CVE-2016-10842
cPanel before 11.54.0.4 allows certain file-read operations in bin/setupglobalspamfilter.pl SEC-74...
CVE-2016-10843
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
CVE-2016-10843
Summary: CVE-2016-10843 affects cPanel prior to 11.54.0.4 and allows code execution in the context of shared users via the JSON-API (SEC-76). Affected product/vector: cPanel software; vulnerability arises through the JSON-API, enabling code execution in shared-user context. Root cause / impact: N...
CVE-2016-10844
The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...
CVE-2016-10844
The vulnerability CVE-2016-10844 affects cPanel prior to 11.54.0.4. The issue lies in the chcpass script, which can reveal a password hash (SEC-77). Impact is an information disclosure risk affecting affected cPanel deployments. The Red Hat security entry and CNVD record corroborate the same desc...
CVE-2016-10845
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/checksystemstorable SEC-78...
CVE-2016-10845
CVE-2016-10845 affects cPanel prior to 11.54.0.4. The issue is an arbitrary file-overwrite in scripts/check_system_storable (SEC-78) due to improper input handling/validation. Impact is partial confidentiality, integrity, and availability per CVSS2/3 data; exploitation details are not provided in...
CVE-2016-10846
cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions SEC-79...
CVE-2016-10846
CVE-2016-10846 affects cPanel prior to 11.54.0.4, enabling arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79). The issue is rooted in the Roundcube database conversion process and allows limited privileges to perform file ownership and permission changes...
CVE-2016-10847
CVE-2016-10847 affects cPanel prior to 11.54.0.4. The vulnerability allows arbitrary file-read and file-write operations via the scripts/fixmailboxpath entry point (SEC-80). This could enable an attacker to read or write sensitive files on affected systems. Evidence from multiple sources confirms...