CVE-2017-18496

Summary for CVE-2017-18496 : The WordPress htaccess plugin from BestWebSoft, prior to version 1.7.6, contains multiple Cross‑Site Scripting (XSS) flaws. Technical details across sources indicate the vulnerability resides in the htaccess plugin’s handling of user-supplied data, enabling an authent...

PT-2019-8431

Name of the Vulnerable Software and Affected Versions WordPress htaccess plugin versions prior to 1.7.6 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.7.6, update to version 1.7.6 or later to resolve the issue...

CVE-2017-18496: Improper Neutralization of Input During Web Page Generation

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

NewStart CGSL MAIN 4.05 : mod_perl Vulnerability (NS-SA-2019-0134)

The remote NewStart CGSL host, running version MAIN 4.05, has modperl packages installed that are affected by a vulnerability: - modperl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because contrary to the documentation there is ...

CVE-2017-18468

cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...

Code injection

cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...

CVE-2017-18468

cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...

CVE-2017-18468

CVE-2017-18468 affects cPanel prior to 62.0.17. The vulnerability arises in the Htaccess::setphppreference API (SEC-232), enabling code execution by demo accounts. No exploitation details are provided in the documents. Affected software: cPanel before 62.0.17. Impact: remote code execution by una...

PT-2019-8403

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue allows demo accounts to execute code via the Htaccess::setphppreference API. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the issue...

CVE-2017-18468: Improper Control of Generation of Code

cPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API SEC-232...

CVE-2017-18405

cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic SEC-345...

CVE-2017-18405

CVE-2017-18405 affects cPanel before 68.0.15. The issue arises from the backup .htaccess modification logic (SEC-345) and enables arbitrary file-read operations. The vulnerability is locally exploitable with no user interaction required, and could lead to exposure of restricted files (confidentia...

PT-2019-8340

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows arbitrary file-read operations due to the backup .htaccess modification logic. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...

CVE-2017-18405: Improper Input Validation

cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic SEC-345...

CVE-2018-20930

cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...

CVE-2018-20930

cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...

Design/Logic Flaw

cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...

CVE-2018-20930

cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...

CVE-2018-20930

CVE-2018-20930 affects cPanel prior to 70.0.23, where enabling Htaccess Optimization allows bypassing .htaccess-based access restrictions. The vulnerability is caused by a flaw in the handling of htaccess rules that permits partial exposure of restricted areas without authentication. Public refer...

PT-2019-10364

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows .htaccess restrictions to be bypassed when Htaccess Optimization is enabled. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issu...