1460 matches found
CVE-2017-18405
CVE-2017-18405 affects cPanel before 68.0.15. The issue arises from the backup .htaccess modification logic (SEC-345) and enables arbitrary file-read operations. The vulnerability is locally exploitable with no user interaction required, and could lead to exposure of restricted files (confidentia...
CVE-2017-18405: Improper Input Validation
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic SEC-345...
PT-2019-8340
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows arbitrary file-read operations due to the backup .htaccess modification logic. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...
CVE-2018-20930
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
CVE-2018-20930
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
Design/Logic Flaw
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
CVE-2018-20930
CVE-2018-20930 affects cPanel prior to 70.0.23, where enabling Htaccess Optimization allows bypassing .htaccess-based access restrictions. The vulnerability is caused by a flaw in the handling of htaccess rules that permits partial exposure of restricted areas without authentication. Public refer...
CVE-2018-20930
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
PT-2019-10364
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows .htaccess restrictions to be bypassed when Htaccess Optimization is enabled. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issu...
CVE-2018-20930: Improper Access Control
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
Apache .htaccess and .htpasswd Disclosure
The Apache server does not properly restrict access to .htaccess and/or .htpasswd files. A remote unauthenticated attacker can download these files and potentially uncover important information. No source data...
CVE-2019-12938
The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffective with nginx. Attackers can read logs via the webmail/logs/sendmail URI...
Mail.ru: Открытый .htaccess на cookery.zakazaka.ru
.htaccess file was available for reading via Web request on cookery.zakazaka.ru due to invalid configuration. While this misconfiguration could potentially lead to information disclosure, no sensitive information was actually leaked...
Unikrn: Full Path Disclosure
HI security team! we can see path on your resource. https://crm.unikrn.com/app/bundles/CampaignBundle/EventListener/LeadSubscriber.php You must create a ban on viewing the script from the outside using .htaccess Impact Full Path Disclosure https://www.owasp.org/index.php/FullPathDisclosure...
CVE-2016-10759
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
Directory traversal
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
CVE-2016-10759
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
Joomla and WordPress Found Harboring Malicious Redirect Code
Security researchers are warning owners of Joomla and WordPress websites of a malicious redirect script that is pushing visitors to malicious websites. On Thursday, Eugene Wozniak, a security researcher with Sucuri, published a report outlining a rogue hypertext access .htaccess injector found on...
CVE-2016-10759
CVE-2016-10759 describes a path traversal vulnerability in Precurio 2.1 via the Xinha plugin. The flaw is in ExtendedFileManager/Classes/ExtendedFileManager.php, where ExtendedFileManager can be used to rename the .htaccess file that blocks PHP uploads, enabling directory traversal and resulting ...
CVE-2016-10759: Improper Limitation of a Pathname to a Restricted Directory
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...