1798 matches found
Code injection
cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...
CVE-2009-0260
Multiple cross-site scripting XSS vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with 1 the rename parameter or 2 the drawing parameter aka the basename variable...
CVE-2019-15648
The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber...
Information Disclosure
php is vulnerable to information disclosire. File rename across filesystems may allow unintended access to the file being renamed while the process is on-going...
php: File rename across filesystems may allow unwanted access during processing
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...
August 17, 2019—KB4512478 (Preview of Monthly Rollup)
None None...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2017-18458
cPanel before 62.0.17 allows file overwrite when renaming an account SEC-219...
Code injection
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
Design/Logic Flaw
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
Design/Logic Flaw
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
CVE‑2017‑18461 affects cPanel prior to 62.0.17, where security policy questions are not preserved across an account rename (SEC‑223). The NVD entry lists CVSS‑v3 base 4.3 (NETWORK, HIGH? actually LOW; see vector) and CVSS‑v2 base 5.0, with impact: integrity Low, otherwise None; exploitability low...
CVE-2017-18453
CVE-2017-18453 affects cPanel prior to 64.0.21. The issue is that supplemental groups are not preserved across account renames, as described in the SEC-260 entry. The connected sources consistently identify this as a behavior/version issue rather than a component-level defect with documented expl...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2017-18449
CVE-2017-18449 affects cPanel prior to 64.0.21. The issue enables certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). The vulnerability is caused by insufficient validation of file rename actions within the specified script path,...