5058 matches found
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
Default credentials
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18473
CVE-2017-18473 affects cPanel before 62.0.4, where the Webmail Password and Security page is vulnerable to a self-XSS due to insufficient input validation. Root cause cited in CNVD as lack of proper validation of client-side data. Impact is self-XSS on affected page; exploitation details are not ...
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
cPanel Information Disclosure Vulnerability (CNVD-2019-29722)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 57.9999.54. An attacker can exploit this vulnerability to perform...
CVE-2017-18473: Improper Neutralization of Input During Web Page Generation
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
PT-2019-8408
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue allows self XSS on the webmail Password and Security page. Recommendations For versions prior to 62.0.4, update to version 62.0.4 or later to resolve the issue...
CVE-2017-18437
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
Code injection
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
CVE-2017-18433
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...
Code injection
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...
CVE-2017-18437
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
CVE-2017-18437
CVE-2017-18437 affects cPanel prior to 64.0.21, where a Webmail account can execute code via forwarders (SEC-240). Impact is code execution with Webmail privileges; CVSS data shows LOW to MEDIUM base scores (C/L/I/P). Remediation: upgrade to 64.0.21 or newer to fix the vulnerability. Other detail...
CVE-2017-18437: Improper Neutralization of Special Elements in Output Used by a Downstream Component
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
CVE-2017-18433: Improper Input Validation
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...
PT-2019-8372
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows a Webmail account to execute code via forwarders. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...
PT-2019-8368
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows code execution by webmail and demo accounts via a "store filter" API call. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...
CVE-2016-10816
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders SEC-121...