717 matches found
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18473
CVE-2017-18473 affects cPanel before 62.0.4, where the Webmail Password and Security page is vulnerable to a self-XSS due to insufficient input validation. Root cause cited in CNVD as lack of proper validation of client-side data. Impact is self-XSS on affected page; exploitation details are not ...
CVE-2017-18471
Summary: CVE-2017-18471 affects cPanel versions before 62.0.4. The issue is a self‑XSS vulnerability on the paper_lantern password‑change screen. Affected software/component: cPanel hosting control panel; paper_lantern password‑change UI. Root cause: Self‑XSS due to insufficient input/output hand...
CVE-2017-18471: Improper Neutralization of Input During Web Page Generation
cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...
CVE-2017-18473: Improper Neutralization of Input During Web Page Generation
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2016-10774: Improper Neutralization of Input During Web Page Generation
cPanel before 60.0.25 allows self XSS in the tailea4migration.cgi interface SEC-172...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18456
CVE-2017-18456 affects cPanel before 62.0.17, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS due to improper input handling. Root cause details across connected sources indicate lack of proper validation of client data in the web UI, enabling a malicious actor to execute ...
PT-2019-8391
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue allows self XSS in the WHM cPAddons showsecurity interface. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the issue...
CVE-2017-18456: Improper Neutralization of Input During Web Page Generation
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
CVE-2016-10813 affects cPanel prior to 57.9999.54, where an input handling flaw during FTP account creation under addon domains allows self-XSS. Root cause: insufficient input validation in the addon domains FTP creation flow. Impact: client-side script execution under the victim’s browser; no se...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...