CVE-2016-10781

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...

CVE-2016-10784

cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...

CVE-2016-10781

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

CVE-2016-10781

CVE-2016-10781 affects cPanel prior to 60.0.25, where the UI_confirm API is vulnerable to self-XSS due to insufficient validation of client-side data. The vulnerability can allow an attacker to execute client-side code via the UI_confirm interface, as described in the public records (SEC-180). Th...

CVE-2016-10777

Summary of CVE-2016-10777 : The vulnerability affects cPanel before 60.0.25 and is described as a self‑XSS in the WHM Tweak Settings for the parameter autodiscover_host (SEC-177). The issue originates from insufficient input handling in the affected web interface, enabling an attacker to cause cl...

PT-2019-7573

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows self XSS in WHM Tweak Settings for autodiscover host. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issue...

PT-2019-7580

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows self XSS in the alias upload interface. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issue...

CVE-2016-10781: Improper Neutralization of Input During Web Page Generation

cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...

CVE-2016-10777: Improper Neutralization of Input During Web Page Generation

cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...

CVE-2016-10784: Improper Neutralization of Input During Web Page Generation

cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...

PT-2019-7577

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows self XSS in the UI confirm API. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issue. As a temporary workaround, consider restricti...

CVE-2017-18473

cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...

CVE-2017-18471

cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...

Design/Logic Flaw

cPanel before 60.0.25 allows self XSS in the tailea4migration.cgi interface SEC-172...

Default credentials

cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...

CVE-2016-10774

cPanel before 60.0.25 allows self XSS in the tailea4migration.cgi interface SEC-172...

CVE-2016-10774

CVE-2016-10774 affects cPanel prior to 60.0.25. Multiple sources describe a self-XSS vulnerability in the tail_ea4_migration.cgi interface (SEC-172). Impact is client-side code execution within the affected web interface; the CVE is associated with versions before 60.0.25. Remediation per the lin...