571 matches found
CVE-2019-17405
Nokia IMPACT 18A: has Reflected self XSS...
Radancy: 'X-Forwarded-Host' key used in input without sanitation - possible cache poisoning
Domain and URL: maximum.nl Summary: The HTTP 'X-Forwarded-Host' is dynamically used in the application without sanitization, allowing an attacker control of the input key. This can allow for self-XSS, or when a CDN or caching service is deployed, risk the CDN caching the request and serving the...
CVE-2019-17380
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...
CVE-2019-17377
cPanel before 82.0.15 allows self XSS in LiveAPI example scripts SEC-524...
CVE-2019-17378
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
Design/Logic Flaw
cPanel before 82.0.15 allows self XSS in LiveAPI example scripts SEC-524...
Design/Logic Flaw
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
Design/Logic Flaw
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...
Design/Logic Flaw
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...
CVE-2019-17378
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface SEC-526...
CVE-2019-17377
The CVE-2019-17377 issue affects cPanel prior to 82.0.15, where the LiveAPI sample scripts are vulnerable to self-XSS due to insufficient validation of client‑side data in the web application. Exploitation could allow an attacker to execute arbitrary client-side code within affected sessions. Rem...
CVE-2019-17376
cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface SEC-521...
CVE-2019-17376
CVE-2019-17376 affects cPanel prior to 82.0.15, where the SSL Certificate Upload interface is vulnerable to self-XSS due to insufficient validation in client-side data handling. Multiple sources confirm the flaw exists in the SSL Certificate Upload feature and is tied to versions older than 82.0....
Design/Logic Flaw
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...
CVE-2016-10806
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page SEC-110...
CVE-2016-10781
cPanel before 60.0.25 allows self XSS in the UIconfirm API SEC-180...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in the alias upload interface SEC-184...
Design/Logic Flaw
cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscoverhost SEC-177...