4 matches found
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
Code injection
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
CVE-2017-18439
CVE-2017-18439 affects cPanel before 64.0.21. A demo account can trigger code execution via the ImageManager_dimensions API call (SEC-243). The remedial version is 64.0.21 or later. Additional references corroborate the issue across multiple advisories.