72 matches found
CVE-2017-18418
CVE-2017-18418 affects cPanel before 66.0.2, enabling stored XSS during WHM cPAddons file operations (SEC-265). The vulnerability is tied to versions prior to 66.0.2; remediation involves upgrading to 66.0.2 or later (per changelogs/references in the connected documents). Exploitation details are...
CVE-2017-18417
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation SEC-263...
CVE-2017-18417
CVE-2017-18417 affects cPanel prior to 66.0.2, where stored XSS can occur during WHM cPAddons installation. The vulnerability is tied to the cPAddons installation flow in WHM, enabling injected client-side scripts. Red Hat and CNVD entries corroborate the same issue with versions before 66.0.2. R...
CVE-2017-18402
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...
Cross site scripting
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...
CVE-2017-18402
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade SEC-336...
CVE-2017-18402
CVE-2017-18402 affects cPanel versions before 68.0.15 and is a stored XSS vulnerability occurring during a cpaddons moderated upgrade (SEC-336). Multiple connected sources (RH, CNVD, NVD) confirm the flaw and its association with the upgrade path, without detailing exploit vectors. The applicable...
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2018-20928
cPanel before 70.0.23 is affected by a stored XSS via the cpaddons vendor interface (SEC-391). Several sources describe this as a cross-site scripting vulnerability with client-side code execution potential due to improper validation of input data. No remediation details are provided in the docum...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
Design/Logic Flaw
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20910
The CVE-2018-20910 entry concerns cPanel before 70.0.23, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS. The issue stems from insufficient validation of client-side data, enabling an attacker to execute client-side code in affected versions. Public references indicate the...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20897
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
CVE-2018-20897
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...