4118 matches found
CVE-2018-20879
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...
Cross site scripting
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...
Command injection
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation SEC-416...
Code injection
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...
Design/Logic Flaw
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
Design/Logic Flaw
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...
Design/Logic Flaw
cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...
Default credentials
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
Cross site scripting
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...
Design/Logic Flaw
cPanel before 74.0.8 allows FTP access during account suspension SEC-449...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
Design/Logic Flaw
cPanel before 74.0.8 mishandles account suspension because of an invalid emailaccounts.json file SEC-445...
CVE-2018-20894
CVE-2018-20894 affects cPanel prior to 74.0.0, where website contents can be exposed to other local users via Git repositories. Root cause: misconfiguration in Git repositories used by the web-site content handling allows local users to access content that should be restricted. Impact: partial co...
CVE-2018-20894
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...
CVE-2018-20893
Affected software: cPanel. Vulnerability: core issue allows file-rename operations during account renames (SEC-442) prior to version 74.0.0. Root cause details are not expanded beyond this description in the provided documents. Impact: exposes unintended file-rename behavior during account rename...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20892
CVE-2018-20892 affects cPanel prior to 74.0.0, where incorrect handling of CAA records allows arbitrary zone file modifications. Root cause: CAA handling flaw in the affected component. Impact per sources is modification of DNS zone data. No exploitation details or patches are specified in the pr...