CVE-2018-20881

cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...

CVE-2018-20881

CVE-2018-20881 affects cPanel prior to 74.0.8, enabling self‑stored XSS on the Security Questions login page (SEC-446). Relevant content from connected sources confirms this is a client‑side script execution vulnerability in the web interface, with no explicit exploitation details provided in the...

CVE-2018-20880

cPanel before 74.0.8 mishandles account suspension because of an invalid emailaccounts.json file SEC-445...

CVE-2018-20880

CVE-2018-20880 affects cPanel before 74.0.8. The root cause is mishandling of account suspension due to an invalid email_accounts.json file (SEC-445). According to the CVE metrics, exploitation is local, with a low-base-impact on availability and no confidentiality/integrity impact, and a low ove...

CVE-2018-20879

cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API SEC-444...

CVE-2018-20879

Summary: CVE-2018-20879 affects cPanel prior to 74.0.8, where demo accounts could execute arbitrary code via the Fileman::viewfile API (SEC-444). The public records indicate an unknown root cause in Fileman::viewfile that enables code execution. The NVD/CVE entries provide a CVSSv3 base score of ...

CVE-2018-20878

cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface SEC-441...

CVE-2018-20878

CVE-2018-20878 affects cPanel prior to 74.0.8, where a stored XSS vulnerability exists in the WHM “File and Directory Restoration” interface (SEC-441). The CNVD entry notes the issue stems from a lack of proper validation of client-side data in the WEB application. Connected records consistently ...

CVE-2018-20877

CVE-2018-20877 affects cPanel prior to 74.0.8, where the WHM Style Upload interface is vulnerable to self-XSS. The underlying issue is rooted in client-side data handling that allows arbitrary script execution within the UI. Exploitation details are not provided in the supplied documents beyond t...

CVE-2018-20877

cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...

CVE-2018-20876

CVE-2018-20876 affects cPanel prior to version 74.0.8, where the Site Software Moderation interface is vulnerable to self XSS. The vulnerability arises from insufficient validation of client-side data in the web application, enabling execution of injected scripts in the context of the moderation ...

CVE-2018-20876

cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...

CVE-2018-20875

CVE-2018-20875 affects cPanel before 74.0.8, where a self XSS exists in the WHM Security Questions interface (SEC-433). Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the vulnerability pattern and the affected version range. The core issue is a self XSS condition caused by insufficient i...

CVE-2018-20875

cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...

CVE-2018-20874

cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...

CVE-2018-20874

CVE-2018-20874 involves the CPANEL/WHM component: before version 74.0.8, the"Create a New Account" interface is vulnerable to a self-XSS vulnerability (SEC-428). The description consistently states that this affects cPanel prior to 74.0.8 and enables self-XSS in the WHM UI when creating new accou...

CVE-2018-20873

CVE-2018-20873 affects cPanel prior to 74.0.8, where local users can disable the ClamAV daemon (SEC-409). Documented impact indicates local access is required with partial availability impact to ClamAV, CVSS2/3 scores LOW. The provided connected materials confirm the product (cPanel) and the vuln...

CVE-2018-20873

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

cPanel Information Disclosure Vulnerability (CNVD-2019-29720)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 76.0.8. No detailed vulnerability details are provided at this tim...

cPanel Trust Management Issues Vulnerabilities

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel before version 76.0.8 that stems from the program not securely changing the PostgreSQL...