97 matches found
CVE-2017-18418
CVE-2017-18418 affects cPanel before 66.0.2, enabling stored XSS during WHM cPAddons file operations (SEC-265). The vulnerability is tied to versions prior to 66.0.2; remediation involves upgrading to 66.0.2 or later (per changelogs/references in the connected documents). Exploitation details are...
CVE-2017-18417
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation SEC-263...
CVE-2017-18417
CVE-2017-18417 affects cPanel prior to 66.0.2, where stored XSS can occur during WHM cPAddons installation. The vulnerability is tied to the cPAddons installation flow in WHM, enabling injected client-side scripts. Red Hat and CNVD entries corroborate the same issue with versions before 66.0.2. R...
CVE-2017-18402
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...
Cross site scripting
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...
CVE-2017-18402
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...
CVE-2017-18402
CVE-2017-18402 affects cPanel versions before 68.0.15 and is a stored XSS vulnerability occurring during a cpaddons moderated upgrade (SEC-336). Multiple connected sources (RH, CNVD, NVD) confirm the flaw and its association with the upgrade path, without detailing exploit vectors. The applicable...
PT-2019-8353
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue allows for stored XSS during WHM cPAddons file operations. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the issue...
CVE-2017-18419: Improper Neutralization of Input During Web Page Generation
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
CVE-2017-18420: Improper Neutralization of Input During Web Page Generation
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
PT-2019-8354
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue allows for stored XSS during WHM cPAddons uninstallation. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the issue...
PT-2019-8337
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows for stored XSS during a cpaddons moderated upgrade. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...
PT-2019-8391
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue allows self XSS in the WHM cPAddons showsecurity interface. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the issue...
PT-2019-8352
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue allows for stored XSS during WHM cPAddons installation. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the issue...
PT-2019-8389
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.24 Description The issue allows for stored XSS in the WHM cPAddons install interface. Recommendations For versions prior to 62.0.24, update to version 62.0.24 or later to resolve the issue...
CVE-2017-18418: Improper Neutralization of Input During Web Page Generation
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
CVE-2017-18454: Improper Neutralization of Input During Web Page Generation
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface SEC-262...
PT-2019-8355
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue allows for stored XSS during WHM cPAddons processing. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the issue...