577 matches found
Design/Logic Flaw
cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...
CVE-2019-20497
cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...
CVE-2019-20497
The CVE-2019-20497 vulnerability affects cPanel prior to version 82.0.18, allowing stored XSS via the WHM Backup Restoration feature. Root cause details are not further described in the provided documents beyond the XSS via backup restore path. No exploit specifics, mitigations, or confirmed patc...
CVE-2012-6449
The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 build 8 have a XSS vulnerability...
Design/Logic Flaw
The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 build 8 have a XSS vulnerability...
CVE-2012-6449
CVE-2012-6449 affects cPanel & WHM 11.34.0 (build 8); the vulnerable components are clientconf.html and detailbw.html, with a documented cross-site scripting (XSS) vulnerability. NVD CVSSv3.1 base score 5.4 (MEDIUM) via NETWORK/vector: LOW spoofed user interaction required? The data shows UI inte...
CVE-2012-6449
The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 build 8 have a XSS vulnerability...
CVE-2012-6448
Cross-site Scripting XSS in cPanel WebHost Manager WHM 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-6448
CVE-2012-6448 describes a Cross-site Scripting (XSS) vulnerability in cPanel WebHost Manager (WHM) 11.34.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected sources confirm the affected product/version and provide an exploit reference (Exp...
CVE-2012-6448
Cross-site Scripting XSS in cPanel WebHost Manager WHM 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
cPanel cross-site scripting vulnerability (CNVD-2019-36155)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Backup Configuration interface in versions prior to cPanel 71.9980.37. The...
CVE-2019-17379
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...
CVE-2019-17380
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...
Design/Logic Flaw
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...
Design/Logic Flaw
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...
CVE-2019-17380
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface SEC-528...
CVE-2019-17379
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...
CVE-2019-17379
CVE-2019-17379 affects cPanel before 82.0.15, introducing a self-stored XSS in the WHM SSL Storage Manager interface. The underlying issue is lack of proper validation of client-side data in the web application, enabling an attacker to inject and execute script through stored input. Impact per so...
cPanel cross-site scripting vulnerability (CNVD-2019-29011)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Spamd Startup Config in versions prior to cPanel 68.0.27. The vulnerabilit...
cPanel cross-site scripting vulnerability (CNVD-2019-28989)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM tailupcp2.cgi interface in versions prior to cPanel 59.9999.145. The...