CVE-2018-20920

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

CVE-2018-20920

CVE-2018-20920 : cPanel before 70.0.23 is affected by a stored XSS in the WHM Edit DNS Zone action (SEC-374). Root cause stated in CNVD/Red Hat sources as insufficient validation of client-side data, enabling execution of injected scripts. Affected product: cPanel/WHM (versions prior to 70.0.23)....

CVE-2018-20915

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...

CVE-2016-10860

CVE-2016-10860 affects cPanel before 11.54.0.0 and is documented as allowing unauthorized zone modification through the WHM API (SEC-66). The vulnerability is corroborated across multiple sources in the connected documents (NVD entry and Red Hat advisory), which state the same affected software a...

CVE-2018-20890

cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...

CVE-2018-20892

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...

CVE-2018-20890

cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...

CVE-2018-20892

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...

Design/Logic Flaw

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...

Design/Logic Flaw

cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...

CVE-2018-20892

CVE-2018-20892 affects cPanel prior to 74.0.0, where incorrect handling of CAA records allows arbitrary zone file modifications. Root cause: CAA handling flaw in the affected component. Impact per sources is modification of DNS zone data. No exploitation details or patches are specified in the pr...

CVE-2018-20892

cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...

CVE-2018-20890

cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...

CVE-2018-20890

CVE-2018-20890 is associated with cPanel prior to 74.0.0 and is described as allowing arbitrary zone file modifications during DNS record edits (SEC-426). The connected sources confirm the affected software and the root cause is the ability to modify zone records during edits, implying integrity ...

CVE-2018-20921: Improper Neutralization of Input During Web Page Generation

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action SEC-375...

PT-2019-10381

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read zone information due to a world-readable archive created by the archive sync zones script. Recommendations: For versions prior to 68.0.27, update to version...

PT-2019-10353

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via a WHM Edit DNS Zone action. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...

CVE-2018-20920: Improper Neutralization of Input During Web Page Generation

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-374...

PT-2019-10369

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via a WHM "Reset a DNS Zone" action. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...

PT-2019-10354

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for stored XSS via a WHM "Delete a DNS Zone" action. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...