CVE-2018-20933

cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...

CVE-2018-20932

cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains SEC-406...

CVE-2018-20932

CVE-2018-20932 affects cPanel before 70.0.23. The issue arises when certain domains are created, causing exposure of Apache HTTP Server logs and resulting in potential information disclosure. The primary reference is SEC-406. Exploitation status and concrete fixes are not provided in the connecte...

CVE-2018-20931

cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page SEC-405...

CVE-2018-20931

The CVE-2018-20931 issue affects cPanel prior to 70.0.23, where demo (non-privileged) accounts can execute code via the Landing Page (SEC-405). The vulnerability enables code execution through the web interface and is reflected in multiple sources (e.g., NVD, RH, CNVD). Affected product: cPanel W...

CVE-2018-20930

CVE-2018-20930 affects cPanel prior to 70.0.23, where enabling Htaccess Optimization allows bypassing .htaccess-based access restrictions. The vulnerability is caused by a flaw in the handling of htaccess rules that permits partial exposure of restricted areas without authentication. Public refer...

CVE-2018-20930

cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...

CVE-2016-10837

CVE-2016-10837 affects cPanel prior to 11.54.0.4, where an unsafe @INC path enables arbitrary code execution. The vulnerability is confirmed by multiple connected records (Red Hat, CNVD, NVD, PRION, etc.), all describing the same root cause. Impact is high (arbitrary code execution) with network ...

CVE-2016-10837

cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path SEC-46...

CVE-2016-10838

cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script SEC-70...

CVE-2016-10838

CVE-2016-10838 affects cPanel prior to 11.54.0.4, where the bin/fmq script allows arbitrary file-read operations. Root cause is a vulnerability in the bin/fmq routine enabling access to files that should be restricted. The impact is confidentiality loss (C of CVSS) with no listed impact to integr...

CVE-2018-20928

cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...

CVE-2018-20928

cPanel before 70.0.23 is affected by a stored XSS via the cpaddons vendor interface (SEC-391). Several sources describe this as a cross-site scripting vulnerability with client-side code execution potential due to improper validation of input data. No remediation details are provided in the docum...

CVE-2016-10839

CVE-2016-10839 affects cPanel prior to 11.54.0.4, where an SQL injection vulnerability exists in bin/horde_update_usernames (SEC-71). Multiple connected sources (Red Hat advisory, CNVD/CNVD-2019-26351, CVE listings) confirm the issue as a SQL injection in the cPanel component, with affected versi...

CVE-2016-10839

cPanel before 11.54.0.4 allows SQL injection in bin/hordeupdateusernames SEC-71...

CVE-2016-10840

CVE-2016-10840 affects cPanel prior to 11.54.0.4. The issue allows arbitrary code execution during locale duplication (SEC-72). Affected product: cPanel (control panel software). The vulnerability is evidenced in multiple sources, including NVD and Red Hat’s CVE listing, indicating an in-product ...

CVE-2016-10840

cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...

CVE-2016-10841

The CVE-2016-10841 entry concerns cPanel prior to 11.54.0.4 where the bin/mkvhostspasswd script discloses password hashes (SEC-73). Public references (NVD, Red Hat, CNVD, CVE lists) corroborate that the issue is a leakage of password hashes, not a user password exposure directly, and exploitation...

CVE-2016-10841

The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes SEC-73...

CVE-2016-10842

CVE-2016-10842 affects cPanel prior to 11.54.0.4, allowing certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74). Affected software: cPanel before 11.54.0.4. Root cause: not explicitly stated beyond the file-read operation in the specified script. Impact: reads of internal file...