Cpanel
cpanel
426 CVEs • 6 products
Products (6)
Click to collapseToggle
Products (6)
Click to collapse
CVEs (426)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543). |
cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). |
cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). |
cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). |
cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). |
cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). |
cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534). |
cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533). |
cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532). |
cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531). |
In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). |
cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520). |
cPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the password file (SEC-516). |
cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499). |
cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508). |
The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. |
Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528). |
cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527). |
cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526). |