cPanel input validation error (CNVD-2019-26362)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 78.0.18. The vulnerability stems from a web-based...

cPanel Information Disclosure Vulnerability (CNVD-2019-25328)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 78.0.18. The vulnerability stems from an error in t...

cPanel Privilege Permission and Access Control Issues Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A privilege permission and access control issue vulnerability exists in versions prior to cPanel 78.0.18, which can be exploited ...

cPanel cross-site scripting vulnerability (CNVD-2019-25327)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 78.0.18. The vulnerability stems from a lack of proper...

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14405

cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg SEC-487...

Design/Logic Flaw

cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing SEC-483...

Cross site scripting

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing SEC-493...

Design/Logic Flaw

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...