2056 matches found
CVE-2017-18448
cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...
CVE-2017-18446
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
Code injection
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
Code injection
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...
Code injection
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
Design/Logic Flaw
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API SEC-250...
Code injection
cPanel before 64.0.21 allows code execution via Rails configuration files SEC-259...
Design/Logic Flaw
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
Code injection
cPanel before 64.0.21 allows demo users to execute traceroute via api2 SEC-244...
Code injection
cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...
CVE-2017-18459
cPanel before 62.0.17 allows arbitrary code execution during account modification SEC-220...
CVE-2017-18458
cPanel before 62.0.17 allows file overwrite when renaming an account SEC-219...
CVE-2017-18457
cPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs SEC-218...
CVE-2017-18457
CVE-2017-18457 affects cPanel prior to 62.0.17. The issue permits arbitrary file-read using WHM /styled/ URLs (SEC-218), due to a path handling flaw. Red Hat and other sources confirm the same vulnerability description. Affected product: cPanel/WHM. Impact: potential exposure of sensitive server ...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18454
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface SEC-262...
CVE-2017-18452
CVE-2017-18452 affects cPanel before 64.0.21. The vulnerability allows code execution via Rails configuration files (SEC-259). Connected documents corroborate the issue across multiple sources (Red Hat, CNVD, NVD, CVE records). No additional exploit details, affected component versions beyond the...
CVE-2017-18450
cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convertroundcubemysql2sqlite SEC-255...
CVE-2017-18450
CVE-2017-18450 affects cPanel prior to 64.0.21 and is associated with file-chmod operations via the script /scripts/convert_roundcube_mysql2sqlite (SEC-255). The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists) as allowing certain file permission changes and has CVSS ...