577 matches found
CVE-2018-20916
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20916
CVE-2018-20916 affects cPanel prior to 70.0.23. The vulnerability is a Stored XSS in WHM via the Edit MX Entry, caused by lack of proper validation of client-side data in the web application. Impact stated as attacker-controlled scripts executed in the victim’s browser. Remediation: upgrade to 70...
CVE-2018-20915
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
CVE-2016-10853
Summary: CVE-2016-10853 affects cPanel before 11.54.0.4, with a stored XSS vulnerability in the WHM Feature Manager interface (SEC-86). Multiple connected sources (NVD/NVD mirror, Red Hat security page, CNVD) corroborate this description. What’s vulnerable: The WHM Feature Manager component of cP...
CVE-2018-20913
CVE-2018-20913 affects cPanel before 70.0.23. The vulnerability allows an attacker to read the root accesshash via the WHM path /cgi/trustclustermaster.cgi (SEC-364). The available sources describe the vulnerability as an information disclosure condition impacting the root accesshash, with no pub...
CVE-2016-10860
CVE-2016-10860 affects cPanel before 11.54.0.0 and is documented as allowing unauthorized zone modification through the WHM API (SEC-66). The vulnerability is corroborated across multiple sources in the connected documents (NVD entry and Red Hat advisory), which state the same affected software a...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2018-20910
The CVE-2018-20910 entry concerns cPanel before 70.0.23, where the WHM cPAddons showsecurity interface is vulnerable to self-XSS. The issue stems from insufficient validation of client-side data, enabling an attacker to execute client-side code in affected versions. Public references indicate the...
CVE-2018-20903
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2018-20903
CVE-2018-20903 concerns cPanel prior to 71.9980.37, where the WHM Backup Configuration interface is vulnerable to self-XSS (SEC-421). The root cause is user input not properly validated client-side, allowing injected script when viewed in the backup config context. Impact is self-XSS in the inter...
CVE-2018-20901
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...
CVE-2018-20901
CVE-2018-20901 affects cPanel before 71.9980.37 and enables Remote-Stored XSS in the WHM Save Theme Interface (SEC-400). The incident is described as XSS that can be triggered remotely via the Save Theme UI, with a CVSS v3 base score of 6.1 (MEDIUM) and CVSS v2 base score 4.3 (MEDIUM). The availa...
CVE-2018-20896
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20896
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface SEC-394...
CVE-2018-20899
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
Design/Logic Flaw
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface SEC-398...
CVE-2018-20899
CVE-2018-20899 affects cPanel prior to 71.9980.37, where stored XSS is possible in the WHM cPAddons installation interface (SEC-398). The vulnerability enables an attacker to inject script that could impact the integrity of data presented to or processed by the user, with no confidentiality impac...