17 matches found
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2017-18422
In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions SEC-272...
EUVD-2021-18682
Malware in sbrugna...
EUVD-2017-9538
Malware in sbrugna...
cPanel cross-site scripting vulnerability (CNVD-2021-31749)
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 94.0.3. The vulnerability stems from saving...
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
Design/Logic Flaw
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2021-31803
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
CVE-2021-31803
CVE-2021-31803 affects cPanel prior to 94.0.3, enabling a self‑XSS via the EasyApache 4 Save Profile (SEC-581). The issue lies in saving a configuration file without adequately filtering user input, allowing an attacker to inject JavaScript. Affected component/flow is the EasyApache 4 Save Profil...
Cpanel 跨站脚本漏洞
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 94.0.3. The vulnerability stems from saving...
CVE-2021-31803: Improper Neutralization of Input During Web Page Generation
cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile SEC-581...
PT-2021-19517
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 94.0.3 Description The issue allows self-XSS via EasyApache 4 Save Profile. Recommendations For versions prior to 94.0.3, update to version 94.0.3 or later to resolve the issue...
CVE-2017-18422
In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions SEC-272...
Code injection
In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions SEC-272...
CVE-2017-18422
In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions SEC-272...
PT-2019-8357
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns weak domlog ownership and permissions set by EasyApache 4 conversion in cPanel. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the issue...