New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past...

Design/Logic Flaw

cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents SEC-92...