Code injection

cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...

CVE-2017-18433

CVE-2017-18433 affects cPanel prior to version 64.0.21. The vulnerability allows code execution via the store_filter API call initiated by webmail and demo accounts (SEC-236). Multiple sources (Red Hat, CNVD, NVD, CVE registry) corroborate that the flaw exists in older cPanel builds; no public ex...