4037 matches found
Design/Logic Flaw
cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...
CVE-2018-20900
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...
CVE-2018-20900
CVE-2018-20900 affects cPanel prior to 71.9980.37, where stored XSS exists in the YUM autorepair functionality (SEC-399). The issue, described in multiple sources (NVD/RH data), indicates an XSS vulnerability that could be triggered via the affected YUM autorepair path. The fixed version is 71.99...
CVE-2018-20899
CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20898
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
CVE-2018-20898
CVE-2018-20898 affects cPanel before 71.9980.37, where e-mail injection is possible during cPAddons moderation (SEC-396). Multiple connected records (NVD, Red Hat, PRION) corroborate the vendor-facing nature of the issue and the same description. The available documents do not provide exploit cod...
CVE-2018-20897
CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...
CVE-2018-20897
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
CVE-2018-20896
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20896
CVE-2018-20896 affects cPanel before 71.9980.37, enabling code injection via the WHM cPAddons interface (SEC-394). Affected component: cPanel/WHM, specifically the cPAddons interface. Underlying issue is a code injection vulnerability in that interface. According to CVSS, impact is LOW for confid...
CVE-2018-20895
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393). The CVE is documented with CVSS v3 base score 7.2 (HIGH) and CVSS v2 base score 6.5 (MEDIUM). There are no exploitation details or remediation steps provided in the connecte...
CVE-2018-20895
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts SEC-393...
CVE-2018-20883
cPanel before 74.0.8 allows FTP access during account suspension SEC-449...
CVE-2018-20885
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation SEC-416...
CVE-2018-20885
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation SEC-416...
CVE-2018-20884
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...