568 matches found
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18471
cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...
Default credentials
cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in the tailea4migration.cgi interface SEC-172...
CVE-2016-10774
cPanel before 60.0.25 allows self XSS in the tailea4migration.cgi interface SEC-172...
CVE-2016-10774
CVE-2016-10774 affects cPanel prior to 60.0.25. Multiple sources describe a self-XSS vulnerability in the tail_ea4_migration.cgi interface (SEC-172). Impact is client-side code execution within the affected web interface; the CVE is associated with versions before 60.0.25. Remediation per the lin...
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18473
CVE-2017-18473 affects cPanel before 62.0.4, where the Webmail Password and Security page is vulnerable to a self-XSS due to insufficient input validation. Root cause cited in CNVD as lack of proper validation of client-side data. Impact is self-XSS on affected page; exploitation details are not ...
CVE-2017-18471
Summary: CVE-2017-18471 affects cPanel versions before 62.0.4. The issue is a self‑XSS vulnerability on the paper_lantern password‑change screen. Affected software/component: cPanel hosting control panel; paper_lantern password‑change UI. Root cause: Self‑XSS due to insufficient input/output hand...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18456
CVE-2017-18456 affects cPanel before 62.0.17, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS due to improper input handling. Root cause details across connected sources indicate lack of proper validation of client data in the web UI, enabling a malicious actor to execute ...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2016-10813
CVE-2016-10813 affects cPanel prior to 57.9999.54, where an input handling flaw during FTP account creation under addon domains allows self-XSS. Root cause: insufficient input validation in the addon domains FTP creation flow. Impact: client-side script execution under the victim’s browser; no se...
CVE-2016-10813
cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains SEC-118...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...