Command injection

cPanel before 70.0.23 allows demo accounts to execute code via awstats SEC-362...

CVE-2018-20912

Summary: CVE-2018-20912 affects cPanel before 70.0.23, where demo accounts could cause code execution via awstats (SEC-362). The issue is reported across multiple sources (e.g., Red Hat and CNVD entries) with the consistent description that vulnerable versions prior to 70.0.23 permit arbitrary co...