4798 matches found
CVE-2017-18464
CVE-2017-18464 affects cPanel before 62.0.17. The vulnerability arises in the WHM Zone Template editor (SEC-226), allowing arbitrary file overwrite due to insufficient input validation. Impact stated as potential for unauthorized file modification. The Red Hat and other sources confirm the same d...
CVE-2017-18464
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18398
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains SEC-331...
CVE-2017-18398
The CVE-2017-18398 entry refers to cPanel's DnsUtils prior to version 68.0.15, where zone creation is possible for hostname and account subdomains (SEC-331). This is documented across multiple connected sources (RH/CVE, NVD, CNVD/CNVD-2019-36129) indicating a vulnerability in the DNS management u...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
Design/Logic Flaw
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20935
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20933
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
CVE-2018-20933
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
Cross site scripting
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action SEC-410...
Cross site scripting
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action SEC-412...
CVE-2018-20946
cPanel before 68.0.27 exposes zone information because the archive_sync_zones script creates a world‑readable archive. This info disclosure vulnerability is documented across CVE‑2018‑20946 entries (NVD, RH, CNVD, etc.). Impact is information exposure of zones; CVSS v3 score is Low (3.3) with loc...