CVE-2018-20899

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

CVE-2018-20898

cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...

CVE-2018-20898

CVE-2018-20898 affects cPanel before 71.9980.37, where e-mail injection is possible during cPAddons moderation (SEC-396). Multiple connected records (NVD, Red Hat, PRION) corroborate the vendor-facing nature of the issue and the same description. The available documents do not provide exploit cod...

CVE-2018-20897

CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...

CVE-2018-20896

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...

PT-2019-10327

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows arbitrary file-unlink operations via the cPAddons moderation system. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the iss...

PT-2019-10361

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via the cpaddons vendor interface. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...

CVE-2018-20899: Improper Neutralization of Input During Web Page Generation

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...

CVE-2018-20897: Improper Input Validation

cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...

PT-2019-10328

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows e-mail injection during cPAddons moderation. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the issue...

PT-2019-10326

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows code injection in the WHM cPAddons interface. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the issue...

CVE-2018-20896: Improper Control of Generation of Code

cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...

CVE-2018-20898: Improper Neutralization of Special Elements in Output Used by a Downstream Component

cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...

CVE-2018-20910: Improper Neutralization of Input During Web Page Generation

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...

CVE-2018-20928: Improper Neutralization of Input During Web Page Generation

cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...

PT-2019-10329

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows for stored XSS in the WHM cPAddons installation interface. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the issue...

PT-2019-10342

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows self XSS in the WHM cPAddons showsecurity Interface. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...