4121 matches found
CVE-2018-20950
CVE-2018-20950 affects cPanel before version 68.0.27, allowing a self-stored XSS in WHM Account Transfer (SEC-386). The vulnerability stems from insufficient input validation in the transfer workflow, enabling an attacker to inject and execute client-side script. Impact is limited to cross-site s...
CVE-2018-20949
Summary: CVE-2018-20949 affects cPanel prior to 68.0.27, specifically the WHM Apache Configuration Include Editor. The root cause is a lack of proper validation of client-side data, enabling a self XSS condition. Impact (as documented): self XSS could allow an attacker to execute client-side code...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20948
CVE-2018-20948 affects cPanel before 68.0.27, where the cPanel Backup Restoration feature (SEC-383) enables a self XSS vulnerability. The issue stems from insufficient validation of client-side data in the WEB application, allowing an attacker to inject/execute script in the context of an authent...
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20947
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script SEC-356...
CVE-2018-20947
CVE-2018-20947: affects cPanel prior to 68.0.27, where the telnetcrt script allows certain file-write operations. Root cause details are not fully described in the provided documents, but the issue is tied to the telnetcrt script enabling unauthorized file writes. The vulnerability is documented ...
CVE-2018-20934
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts SEC-411...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20933
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
CVE-2018-20933
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20934
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts SEC-411...
CVE-2016-10844
The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...
CVE-2018-20927
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing SEC-382...
CVE-2016-10849
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...
CVE-2018-20930
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
CVE-2018-20932
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains SEC-406...