577 matches found
CVE-2017-18408
CVE-2017-18408 affects cPanel before 67.9999.103, exposing a stored XSS vulnerability in the WHM MySQL Password Change interfaces (SEC-282). Multiple sources confirm the issue and reference the same remediation version 67.9999.103. The root cause is described in CNVD-2019-30473 as inadequate vali...
CVE-2017-18408
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces SEC-282...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20951
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
CVE-2018-20949
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2016-10827
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
Cross site scripting
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences SEC-96...
Cross site scripting
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
Design/Logic Flaw
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2016-10827
CVE-2016-10827 : A stored XSS vulnerability in cPanel/WHM (Edit System Mail Preferences) affects versions before 55.9999.141. The issue is described as a self-stored cross-site scripting flaw that could be exploited through the affected mail preferences UI. Public references in the connected docu...
CVE-2018-20953
CVE-2018-20953 affects cPanel before 68.0.27, enabling self-XSS in the WHM listips interface due to insufficient input validation. Impact is client-side code execution in the victim’s browser when interacting with the interface. The vulnerability is documented across multiple sources (NVD/Red Hat...
CVE-2018-20953
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...
CVE-2018-20952
CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...