CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

CVE-2018-20879

Summary: CVE-2018-20879 affects cPanel prior to 74.0.8, where demo accounts could execute arbitrary code via the Fileman::viewfile API (SEC-444). The public records indicate an unknown root cause in Fileman::viewfile that enables code execution. The NVD/CVE entries provide a CVSSv3 base score of ...

CVE-2018-20878

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...

CVE-2018-20878

CVE-2018-20878 affects cPanel prior to 74.0.8, where a stored XSS vulnerability exists in the WHM “File and Directory Restoration” interface (SEC-441). The CNVD entry notes the issue stems from a lack of proper validation of client-side data in the WEB application. Connected records consistently ...

CVE-2018-20877

CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20876

CVE-2018-20876 affects cPanel prior to version 74.0.8, where the Site Software Moderation interface is vulnerable to self XSS. The vulnerability arises from insufficient validation of client-side data in the web application, enabling execution of injected scripts in the context of the moderation ...

CVE-2018-20876

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20875

CVE-2018-20875 affects cPanel before 74.0.8, where a self XSS exists in the WHM Security Questions interface (SEC-433). Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the vulnerability pattern and the affected version range. The core issue is a self XSS condition caused by insufficient i...

CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

CVE-2018-20874

CVE-2018-20874 involves the CPANEL/WHM component: before version 74.0.8, the"Create a New Account" interface is vulnerable to a self-XSS vulnerability (SEC-428). The description consistently states that this affects cPanel prior to 74.0.8 and enables self-XSS in the WHM UI when creating new accou...

CVE-2018-20873

CVE-2018-20873 affects cPanel prior to 74.0.8, where local users can disable the ClamAV daemon (SEC-409). Documented impact indicates local access is required with partial availability impact to ClamAV, CVSS2/3 scores LOW. The provided connected materials confirm the product (cPanel) and the vuln...

CVE-2018-20873

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

cPanel Information Disclosure Vulnerability (CNVD-2019-26330)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in cPanel versions prior to 80.0.5. The vulnerability stems from a configuration o...

cPanel Permission License and Access Control Issues Vulnerability (CNVD-2019-29617)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A vulnerability exists in cPanel prior to version 82.0.2 for privilege permission and access control issues. The vulnerability...

cPanel Information Disclosure Vulnerability (CNVD-2019-29720)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 76.0.8. No detailed vulnerability details are provided at this tim...

cPanel Trust Management Issues Vulnerabilities

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel before version 76.0.8 that stems from the program not securely changing the PostgreSQL...

cPanel Input Validation Error Vulnerability (CNVD-2019-26363)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 78.0.18. The vulnerability stems from a web-based...

cPanel Input Validation Error Vulnerability (CNVD-2019-26371)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 78.0.2. The vulnerability stems from a web-based...