1621 matches found
CVE-2017-18466
CVE-2017-18466 affects cPanel prior to 62.0.17. The issue is that the system does not properly recognize domain ownership when adding parked domains to a mail configuration (SEC-228). Affected product/version: cPanel before 62.0.17. Description across connected sources reiterates the same vulnera...
CVE-2017-18464
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
CVE-2017-18462
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
CVE-2017-18452
cPanel before 64.0.21 allows code execution via Rails configuration files SEC-259...
CVE-2017-18450
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convertroundcubemysql2sqlite SEC-255...
CVE-2017-18448
cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...
CVE-2017-18446
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
Code injection
cPanel before 64.0.21 allows code execution via Rails configuration files SEC-259...
Design/Logic Flaw
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
Code injection
cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...
Code injection
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
Code injection
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
Code injection
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
Design/Logic Flaw
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
Code injection
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
CVE-2017-18459
cPanel before 62.0.17 allows arbitrary code execution during account modification SEC-220...
CVE-2017-18458
cPanel before 62.0.17 allows file overwrite when renaming an account SEC-219...
CVE-2017-18457
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs SEC-218...
CVE-2017-18457
CVE-2017-18457 affects cPanel prior to 62.0.17. The issue permits arbitrary file-read using WHM /styled/ URLs (SEC-218), due to a path handling flaw. Red Hat and other sources confirm the same vulnerability description. Affected product: cPanel/WHM. Impact: potential exposure of sensitive server ...