1621 matches found
CVE-2018-20928
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface SEC-391...
CVE-2016-10841
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes SEC-73...
CVE-2016-10843
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
CVE-2016-10843
Summary: CVE-2016-10843 affects cPanel prior to 11.54.0.4 and allows code execution in the context of shared users via the JSON-API (SEC-76). Affected product/vector: cPanel software; vulnerability arises through the JSON-API, enabling code execution in shared-user context. Root cause / impact: N...
CVE-2016-10844
The vulnerability CVE-2016-10844 affects cPanel prior to 11.54.0.4. The issue lies in the chcpass script, which can reveal a password hash (SEC-77). Impact is an information disclosure risk affecting affected cPanel deployments. The Red Hat security entry and CNVD record corroborate the same desc...
CVE-2016-10847
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath SEC-80...
CVE-2016-10848
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck SEC-81...
CVE-2016-10848
CVE-2016-10848 affects cPanel prior to 11.54.0.4, allowing arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). The issue is documented across multiple sources (NVD, Red Hat advisory) with a high impact rating (C/V: high; A: high) and network attack vector. The provided materials d...
CVE-2016-10849
CVE-2016-10849 affects cPanel before 11.54.0.4, where file-chmod operations in scripts/secureit (SEC-82) can be abused. Connected documents confirm the affected product/version and the specific component (scripts/secureit) with an integrity impact (I:H in CVSS3) and a network vector with low atta...
CVE-2018-20926
CVE-2018-20926 affects cPanel before 70.0.23 and allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). Red Hat notes the issue in cPanel prior to 70.0.23; CNVD/CVELIST entries confirm the same. Impact is local, with privileges elevated if exploited. Remediation is u...
CVE-2018-20925
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface SEC-379...
CVE-2018-20922
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...
CVE-2018-20916
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20911
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...
CVE-2018-20904
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
