124 matches found
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
6.3CVSS5.9AI score0.00947EPSS
SaveExploits0References2
CVE-2018-20938
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls SEC-324...
2.7CVSS5.8AI score0.0059EPSS
SaveExploits0References1
PT-2018-13665
Name of the Vulnerable Software and Affected Versions Evolution CMS versions 1.4.0 through 1.4.5 Description The issue allows for XSS via the manager/ API endpoint, specifically through the search parameter. This can potentially lead to malicious script execution. Recommendations For Evolution CM...
5.4CVSS0.00575EPSS
SaveExploits1References6
20