CVE-2019-14387

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...

Cross site scripting

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...

CVE-2019-14387

CVE-2019-14387 affects cPanel before 82.0.2, with a Self XSS vulnerability in the cPanel and webmail master templates (SEC-506). Root cause is client-side script execution via crafted input in template code. Impact, per CVSS data, is MEDIUM: network access with exploitation requiring user interac...

PT-2019-10293

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 76.0.8 Description: The issue concerns a Self XSS in the WHM Additional Backup Destination field. Recommendations: For versions prior to 76.0.8, update to version 76.0.8 or later to resolve the issue...

CVE-2019-14387: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...

PT-2019-13656

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.2 Description The issue concerns a Self XSS in the cPanel and webmail master templates. Recommendations For versions prior to 82.0.2, update to version 82.0.2 or later to resolve the issue...

CVE-2018-20865: Improper Neutralization of Input During Web Page Generation

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

Code injection

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2019-13970

CVE-2019-13970 affects antSword before 2.1.0. A self-XSS vulnerability in the database configuration leads to code execution through the modules: modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js. Impact is described as co...

PT-2019-13499

Name of the Vulnerable Software and Affected Versions antSword versions prior to 2.1.0 Description The issue is related to self-XSS in the database configuration, which can lead to code execution. This is possible via files such as modules/database/asp/index.js, modules/database/custom/index.js,...

CVE-2019-13970: Improper Neutralization of Input During Web Page Generation

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

Cross site scripting

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

CVE-2018-20850

Stormshield Network Security versions 2.0.0–2.13.0 and 3.0.0–3.7.1 contain a self‑XSS vulnerability in the SNS web server's command‑line interface. The issue stems from a lack of proper validation in the web application, enabling local attackers to trigger client‑side script execution. No remedia...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...