8786 matches found
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
Authentication flaw
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
Cross site scripting
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Cross site scripting
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
Design/Logic Flaw
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images SEC-88...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2016-10822
The CVE affects cPanel before 55.9999.141, where an apparent self-XSS flaw exists in X3 Reseller Branding Images due to insufficient validation of client-supplied data. Impact is client‑side code execution as described; no exploitation details are provided in the sources. Remediation: upgrade to ...
CVE-2016-10827
CVE-2016-10827 : A stored XSS vulnerability in cPanel/WHM (Edit System Mail Preferences) affects versions before 55.9999.141. The issue is described as a self-stored cross-site scripting flaw that could be exploited through the affected mail preferences UI. Public references in the connected docu...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20950
CVE-2018-20950 affects cPanel before version 68.0.27, allowing a self-stored XSS in WHM Account Transfer (SEC-386). The vulnerability stems from insufficient input validation in the transfer workflow, enabling an attacker to inject and execute client-side script. Impact is limited to cross-site s...
CVE-2018-20948
CVE-2018-20948 affects cPanel before 68.0.27, where the cPanel Backup Restoration feature (SEC-383) enables a self XSS vulnerability. The issue stems from insufficient validation of client-side data in the WEB application, allowing an attacker to inject/execute script in the context of an authent...
CVE-2018-20948
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20903
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...