5008 matches found
CVE-2017-18447
CVE-2017-18447 affects cPanel before 64.0.21. The root cause is a vulnerability in the ClamScanner_getsocket API that enables code execution by demo accounts. Impact is code execution with low privileges; attack surface is the affected cPanel environment. The provided documents do not include exp...
CVE-2017-18447
cPanel before 64.0.21 allows demo accounts to execute code via the ClamScannergetsocket API SEC-251...
CVE-2017-18446
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
CVE-2017-18446
CVE-2017-18446 affects cPanel prior to 64.0.21. The issue allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250). The Red Hat/CNVD/EUVD/ENISA entries corroborate the core description. Impact as stated is potential access to restricted files and modificati...
CVE-2017-18445
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...
CVE-2017-18445
CVE-2017-18445 affects cPanel prior to 64.0.21. The issue is that SSL API calls could bypass demo restrictions, as described in SEC-249. The available connected documents confirm the product/version and the nature of the vulnerability but do not provide exploits, in-the-wild details, or explicit ...
CVE-2017-18444
cPanel before 64.0.21 allows demo accounts to execute SSH API commands SEC-248...
CVE-2017-18444
CVE-2017-18444 affects cPanel before 64.0.21, enabling demo accounts to execute SSH API commands (SEC-248). Multiple sources (NVD, Red Hat, CNVD) confirm the impact. The provided documents do not specify the underlying root cause, affected component details, exact exploit vectors, or a confirmed ...
CVE-2017-18443
CVE-2017-18443 affects cPanel prior to 64.0.21. The issue allows demo and suspended accounts to use SSH port forwarding, indicating a flaw in access control around SSH features (SEC-247). The documented remediation is to upgrade to version 64.0.21 or later. The connected sources confirm the descr...
CVE-2017-18443
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...
CVE-2017-18442
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands SEC-246...
CVE-2017-18442
CVE-2017-18442 : Affected software is cPanel prior to 64.0.21. The issue allows demo accounts to trigger Cpanel::SPFUI API commands (SEC-246), implying limited privilege elevation within the control panel API. The description and connected documents do not provide additional exploitation details ...
CVE-2017-18441
cPanel before 64.0.21 is affected. Across multiple sources, the vulnerability is described as an input validation error in cPanel prior to 64.0.21 that allows a demo account to redirect web traffic (SEC-245). The Red Hat/Cnvd entries confirm the same flaw and tie it to versions pre-64.0.21, with ...
CVE-2017-18441
cPanel before 64.0.21 allows demo accounts to redirect web traffic SEC-245...
CVE-2017-18440
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
CVE-2017-18440
CVE-2017-18440 affects cPanel prior to 64.0.21. The vulnerability allows demo users to execute traceroute via the api2 interface (SEC-244). Impact is limited to information collection via traceroute; no broader impact is stated. Remediation is to upgrade to cPanel 64.0.21 or later, or apply provi...
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
CVE-2017-18439
CVE-2017-18439 affects cPanel before 64.0.21. A demo account can trigger code execution via the ImageManager_dimensions API call (SEC-243). The remedial version is 64.0.21 or later. Additional references corroborate the issue across multiple advisories.
