577 matches found
CVE-2021-38585
The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...
CVE-2020-26111
cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface SEC-566...
CVE-2020-26113
cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces SEC-569...
CVE-2020-29137
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20938
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls SEC-324...
CVE-2016-10851
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...
CVE-2018-20926
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...
CVE-2018-20920
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
CVE-2019-14386
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...
CVE-2019-14390
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
CVE-2019-17380
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20868
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...
CVE-2018-20875
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20915
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
CVE-2018-20916
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...