CVE-2018-20874

CVE-2018-20874 involves the CPANEL/WHM component: before version 74.0.8, the"Create a New Account" interface is vulnerable to a self-XSS vulnerability (SEC-428). The description consistently states that this affects cPanel prior to 74.0.8 and enables self-XSS in the WHM UI when creating new accou...

cPanel cross-site scripting vulnerability (CNVD-2019-26366)

cPanel is a set of the most prestigious commercial software in the web hosting industry, which is based on Linux and BSD system, developed in PHP and closed-source software in nature, providing powerful and quite complete hosting management functions. A stored cross-site scripting vulnerability...

CVE-2018-20868

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...

CVE-2018-20865

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

Cross site scripting

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface SEC-464...

Cross site scripting

cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature SEC-461...

CVE-2018-20868

cPanel before 76.0.8 contains a Stored XSS in the WHM MultiPHP Manager interface (SEC-464). Affected product: cPanel/WHM (MultiPHP Manager); vulnerable component: stored XSS in the interface. Root cause: vulnerability described as Stored XSS; the exact exploit details are not provided in the docu...

CVE-2018-20865

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field SEC-459...

CVE-2018-20865

CVE-2018-20865 affects cPanel prior to 76.0.8, where a Self XSS flaw exists in the WHM Addtional Backup Destination field (SEC-459). Exploitation context is not detailed in the provided documents, but the vulnerability is tied to user-supplied content in the WHM backup destination setting, enabli...

CVE-2019-14390

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14390

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14386

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

Cross site scripting

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

Design/Logic Flaw

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

CVE-2019-14390

cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface SEC-512...

CVE-2019-14386

cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface SEC-504...

CVE-2019-14386

CVE-2019-14386 affects cPanel before 82.0.2, where a stored XSS vulnerability exists in the WHM Tomcat Manager interface (SEC-504). Impact is cross-site scripting; remediation is to upgrade to 82.0.2 or later (per provided sources). If exploitation details are not provided in the documents, note ...

CVE-2017-11441

The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297...

Design/Logic Flaw

The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297...

CVE-2017-11441

CVE-2017-11441 affects the cPanel WHM Upload Locale interface. Vulnerable versions include: before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2. The issue is an XSS via a locale filename (SEC-297). The connected documents corr...