Code injection

cPanel before 64.0.21 allows demo accounts to execute code via the ClamScannergetsocket API SEC-251...

CVE-2017-18447

cPanel before 64.0.21 allows demo accounts to execute code via the ClamScannergetsocket API SEC-251...

CVE-2017-18447

CVE-2017-18447 affects cPanel before 64.0.21. The root cause is a vulnerability in the ClamScanner_getsocket API that enables code execution by demo accounts. Impact is code execution with low privileges; attack surface is the affected cPanel environment. The provided documents do not include exp...