2056 matches found
CVE-2016-10826: Improper Authentication
cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...
CVE-2018-20890: Improper Access Control
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
CVE-2018-20922: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...
CVE-2016-10843: Improper Neutralization of Special Elements used in a Command
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
CVE-2018-20920: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
CVE-2018-20937: Improper Authentication
cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...
CVE-2016-10831: Improper Authentication
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account SEC-101...
CVE-2016-10855: Improper Input Validation
cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd SEC-91...
CVE-2018-20882: Improper Input Validation
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...
CVE-2018-20887: Improper Neutralization of Special Elements used in an SQL Command
cPanel before 74.0.0 allows SQL injection during database backups SEC-420...
CVE-2018-20877: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20923: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action SEC-377...
CVE-2018-20884: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface SEC-367...
CVE-2018-20881: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...
CVE-2018-20896: Improper Control of Generation of Code
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20898: Improper Neutralization of Special Elements in Output Used by a Downstream Component
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
CVE-2018-20889: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...
CVE-2018-20901: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...