1621 matches found
CVE-2018-20890
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
CVE-2018-20894
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
Code injection
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
Design/Logic Flaw
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
Design/Logic Flaw
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
Design/Logic Flaw
cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality SEC-399...
Design/Logic Flaw
cPanel before 74.0.0 insecurely stores phpMyAdmin session files SEC-418...
CVE-2018-20899
CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...
CVE-2018-20898
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
CVE-2018-20897
CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...
CVE-2018-20876
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface SEC-434...
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20880
cPanel before 74.0.8 mishandles account suspension because of an invalid emailaccounts.json file SEC-445...
CVE-2018-20882
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change SEC-447...