1621 matches found
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2016-10823
The vulnerability CVE-2016-10823 affects cPanel before 55.9999.141. The root cause is MakeText interpolation, enabling arbitrary code execution in the context of the root account. Documented in multiple sources (NVD, RH, PRION, CVE lists) with the same impact description. No explicit exploit deta...
CVE-2016-10824
CVE-2016-10824 affects cPanel prior to 55.9999.141. The vulnerability enables unauthenticated arbitrary code execution via DNS NS entry poisoning. Public details in the provided connected sources are limited to the affected version and impact; no root-cause specifics or remediation steps are desc...
CVE-2016-10831
CVE-2016-10831 affects cPanel before 55.9999.141. The issue is an authentication flaw where possessing another account does not trigger a two-factor authentication check (SEC-101). The vulnerability is described across multiple sources as an authorization/authentication issue in these versions. I...
CVE-2016-10831
cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account SEC-101...
CVE-2018-20953
CVE-2018-20953 affects cPanel before 68.0.27, enabling self-XSS in the WHM listips interface due to insufficient input validation. Impact is client-side code execution in the victim’s browser when interacting with the interface. The vulnerability is documented across multiple sources (NVD/Red Hat...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20952
CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20947
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script SEC-356...
CVE-2018-20947
CVE-2018-20947: affects cPanel prior to 68.0.27, where the telnetcrt script allows certain file-write operations. Root cause details are not fully described in the provided documents, but the issue is tied to the telnetcrt script enabling unauthorized file writes. The vulnerability is documented ...
CVE-2018-20930
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled SEC-401...
CVE-2016-10849
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...
CVE-2016-10848
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck SEC-81...
CVE-2018-20926
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...
CVE-2018-20925
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface SEC-379...
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2016-10845
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/checksystemstorable SEC-78...