5055 matches found
CVE-2016-10815
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...
CVE-2016-10815
CVE-2016-10815 affects cPanel prior to 57.9999.54, enabling arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120). The vulnerability stems from insufficient access controls in the Branding APIs, allowing an attacker to read files on behalf of Webmail users. No exploitati...
CVE-2016-10816
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders SEC-121...
CVE-2016-10816
CVE-2016-10816 affects cPanel prior to 57.9999.54, where Webmail accounts can execute arbitrary code via forwarders. Public sources confirm the issue exists in these versions; Red Hat, CNVD, and CVE listings corroborate the vulnerability description. The root cause and affected scope are tied to ...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
Default credentials
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
CVE-2016-10859
CVE-2016-10859 affects cPanel before 11.54.0.0. The issue allows unauthorized password changes through Webmail API commands (SEC-65). Root cause details are not expanded beyond the description in the provided documents. Exploitation status and concrete remediation steps are not specified in the c...
CVE-2016-10859
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
PT-2019-7611
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows arbitrary file-read operations for Webmail accounts via Branding APIs. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issu...
CVE-2016-10816: Improper Input Validation
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders SEC-121...
PT-2019-7655
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.0 Description The issue allows unauthorized password changes through Webmail API commands. Recommendations For versions prior to 11.54.0.0, update to version 11.54.0.0 or later to resolve the issue...
CVE-2016-10859: Improper Authorization
cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands SEC-65...
PT-2019-7612
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue allows Webmail accounts to execute arbitrary code through forwarders. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resolve the issue...
CVE-2016-10815: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs SEC-120...
CVE-2019-14387
cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...
CVE-2019-14387
CVE-2019-14387 affects cPanel before 82.0.2, with a Self XSS vulnerability in the cPanel and webmail master templates (SEC-506). Root cause is client-side script execution via crafted input in template code. Impact, per CVSS data, is MEDIUM: network access with exploitation requiring user interac...
CVE-2019-14387
cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates SEC-506...
PT-2019-13656
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.2 Description The issue concerns a Self XSS in the cPanel and webmail master templates. Recommendations For versions prior to 82.0.2, update to version 82.0.2 or later to resolve the issue...