531 matches found
CVE-2018-20916
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20915
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
CVE-2018-20919
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...
CVE-2018-20910
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface SEC-357...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2016-10853
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
CVE-2018-20901
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...
CVE-2018-20901
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...
CVE-2016-10851
cPanel before 11.54.0.4 allows self XSS in the WHM PHP Configuration editor interface SEC-84...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action SEC-373...
Design/Logic Flaw
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
Cross site scripting
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
Design/Logic Flaw
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface SEC-400...
Design/Logic Flaw
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
Cross site scripting
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action SEC-376...