577 matches found
CVE-2018-20877
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
CVE-2018-20875
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20875
CVE-2018-20875 affects cPanel before 74.0.8, where a self XSS exists in the WHM Security Questions interface (SEC-433). Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the vulnerability pattern and the affected version range. The core issue is a self XSS condition caused by insufficient i...
CVE-2018-20874
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...
CVE-2018-20874
CVE-2018-20874 involves the CPANEL/WHM component: before version 74.0.8, the"Create a New Account" interface is vulnerable to a self-XSS vulnerability (SEC-428). The description consistently states that this affects cPanel prior to 74.0.8 and enables self-XSS in the WHM UI when creating new accou...
cPanel cross-site scripting vulnerability (CNVD-2019-26366)
cPanel is a set of the most prestigious commercial software in the web hosting industry, which is based on Linux and BSD system, developed in PHP and closed-source software in nature, providing powerful and quite complete hosting management functions. A stored cross-site scripting vulnerability...
CVE-2018-20868
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...
CVE-2018-20865
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...
Cross site scripting
cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature SEC-461...
Cross site scripting
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...
CVE-2018-20868
cPanel before 76.0.8 contains a Stored XSS in the WHM MultiPHP Manager interface (SEC-464). Affected product: cPanel/WHM (MultiPHP Manager); vulnerable component: stored XSS in the interface. Root cause: vulnerability described as Stored XSS; the exact exploit details are not provided in the docu...
CVE-2018-20865
CVE-2018-20865 affects cPanel prior to 76.0.8, where a Self XSS flaw exists in the WHM Addtional Backup Destination field (SEC-459). Exploitation context is not detailed in the provided documents, but the vulnerability is tied to user-supplied content in the WHM backup destination setting, enabli...
CVE-2018-20865
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...
CVE-2019-14390
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
CVE-2019-14390
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
CVE-2019-14386
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...
Cross site scripting
cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...
Design/Logic Flaw
cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...