4058 matches found
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...
Design/Logic Flaw
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi SEC-364...
Design/Logic Flaw
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...
Design/Logic Flaw
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
Default credentials
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
Cross site scripting
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
Code injection
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...
Code injection
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups SEC-338...
Design/Logic Flaw
cPanel before 70.0.23 allows any user to disable Solr SEC-371...
Command injection
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files SEC-368...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
Design/Logic Flaw
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...
Code injection
cPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds SEC-29...
Command injection
cPanel before 70.0.23 allows demo accounts to execute code via awstats SEC-362...
Design/Logic Flaw
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
Cross site scripting
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...