8 matches found
CVE-2021-47794: Improper Neutralization of Special Elements used in an OS Command
ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
EUVD-2016-1807
Malware in sbrugna...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
PT-2019-7609
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows self XSS during ftp account creation under addon domains. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...
CVE-2016-10813: Improper Neutralization of Input During Web Page Generation
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...