2056 matches found
CVE-2016-10792
cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives SEC-141...
CVE-2016-10795
cPanel before 59.9999.145 allows stored XSS in the WHM tailupcp2.cgi interface SEC-156...
Code injection
cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error SEC-154...
Code injection
cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect ! in Mail::SPF scripts SEC-152...
CVE-2016-10788
cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin SEC-188...
CVE-2016-10789
cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler SEC-191...
CVE-2016-10777
cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...
CVE-2016-10780
cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...
CVE-2016-10782
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
CVE-2016-10783
cPanel before 60.0.25 allows self stored XSS in SSLlistkeys SEC-182...
CVE-2016-10787
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries SEC-187...
Cross site scripting
cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination SEC-174...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...
Design/Logic Flaw
cPanel before 60.0.25 allows stored XSS in api1listautoresponders SEC-179...
Cross site scripting
cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...
Cross site scripting
cPanel before 60.0.25 allows stored XSS in the ftpsessions API SEC-180...
Code injection
cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin SEC-188...
Improper access control
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries SEC-187...