4033 matches found
CVE-2019-14391
cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs SEC-514...
CVE-2019-14386
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...
CVE-2019-14387
cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...
Default credentials
cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...
Cross site scripting
cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...
Design/Logic Flaw
cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs SEC-514...
Cross site scripting
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
Design/Logic Flaw
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
Design/Logic Flaw
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...
CVE-2019-14391
CVE-2019-14391: Affects cPanel prior to 82.0.2 where Reseller package creation ACLs are not properly enforced (SEC-514). Root cause is insufficient ACL enforcement; impact is privilege/permission concerns for reseller package creation. Affected versions: all before 82.0.2. Remediation: upgrade to...
CVE-2019-14391
cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs SEC-514...
CVE-2019-14390
CVE-2019-14390 affects cPanel prior to 82.0.2, with a stored XSS in the WHM Modify Account interface (SEC-512). Impact described in sources: XSS within authenticated sessions; CVSS data from NVD lists base scores: CVSSv2 3.5 (LOW) and CVSSv3 5.4 (MEDIUM) . Remediation: upgrade to version 82.0.2 o...
CVE-2019-14390
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
CVE-2019-14389
cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...
CVE-2019-14389
CVE-2019-14389 affects cPanel prior to 82.0.2 . The vulnerability allows local users to obtain the MySQL root password, i.e., an information disclosure (SEC-510). Reported details from multiple sources indicate the root cause is in cPanel versions before 82.0.2, with the impact described as discl...
CVE-2019-14388
CVE-2019-14388 affects cPanel prior to 82.0.2, allowing unauthenticated file creation due to mishandled Exim log parsing (SEC-507). Root cause: improper handling of Exim logs enables file creation without authentication. Impact: unauthorized file creation; no explicit exploitation details provide...
CVE-2019-14388
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
CVE-2019-14387
CVE-2019-14387 affects cPanel before 82.0.2, with a Self XSS vulnerability in the cPanel and webmail master templates (SEC-506). Root cause is client-side script execution via crafted input in template code. Impact, per CVSS data, is MEDIUM: network access with exploitation requiring user interac...