4038 matches found
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20896
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20887
cPanel before 74.0.0 allows SQL injection during database backups SEC-420...
CVE-2018-20888
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
CVE-2018-20887
cPanel before 74.0.0 allows SQL injection during database backups SEC-420...
CVE-2018-20888
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
CVE-2018-20886
cPanel before 74.0.0 insecurely stores phpMyAdmin session files SEC-418...
CVE-2018-20886
cPanel before 74.0.0 insecurely stores phpMyAdmin session files SEC-418...
Code injection
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
Sql injection
cPanel before 74.0.0 allows SQL injection during database backups SEC-420...
Design/Logic Flaw
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
Authentication flaw
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
Design/Logic Flaw
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
Security feature bypass
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
Design/Logic Flaw
cPanel before 74.0.0 insecurely stores phpMyAdmin session files SEC-418...