EUVD-2017-9593

Malware in sbrugna...

cPanel cross-site scripting vulnerability (CNVD-2019-30463)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the Webmail Password and Security page in versions prior to cPanel 62.0.4. The...

cPanel Information Disclosure Vulnerability (CNVD-2019-29714)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4 that stems from the program not performing proper ACL...

cPanel path traversal vulnerability (CNVD-2019-30468)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions prior to cPanel 62.0.4. The vulnerability stems from a failure of a network...

cPanel Trust Management Issues Vulnerability (CNVD-2019-29631)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Security Feature Issue Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29624)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at th...

cPanel cross-site scripting vulnerability (CNVD-2019-30471)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 62.0.4. The vulnerability stems from a lack of proper...

CVE-2017-18481

cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface SEC-211...

CVE-2017-18471

cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...

Default credentials

cPanel before 62.0.4 allows self XSS on the paperlantern password-change screen SEC-197...

Design/Logic Flaw

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...

Design/Logic Flaw

cPanel before 62.0.4 allows resellers to use the WHM enqueuetransferitem API for queueing non-rearrange modules SEC-213...

Default credentials

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account SEC-196...