717 matches found
CVE-2016-10854: Improper Neutralization of Input During Web Page Generation
cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...
PT-2019-10389
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.27 Description The issue allows self XSS in the WHM listips interface. Recommendations For versions prior to 68.0.27, update to version 68.0.27 or later to resolve the issue...
PT-2019-10302
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows self XSS in the WHM "Create a New Account" interface. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...
CVE-2018-20951: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
PT-2019-10303
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows self XSS in the WHM Security Questions interface. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...
PT-2019-7650
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue allows self XSS in the X3 Entropy Banner interface. Recommendations For versions prior to 11.54.0.4, update to version 11.54.0.4 or later to resolve the issue...
CVE-2018-20949: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20948: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20903: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2016-10813: Improper Neutralization of Input During Web Page Generation
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2018-20953: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20875: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20910: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
PT-2019-7609
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows self XSS during ftp account creation under addon domains. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...
CVE-2018-20877: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20865
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...
Design/Logic Flaw
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...
CVE-2018-20865
CVE-2018-20865 affects cPanel prior to 76.0.8, where a Self XSS flaw exists in the WHM Addtional Backup Destination field (SEC-459). Exploitation context is not detailed in the provided documents, but the vulnerability is tied to user-supplied content in the WHM backup destination setting, enabli...
