Skip to content

Cpanel vulnerabilities

Products

Newest

cpanelSimple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows...CVE-2007-33677.8 HighJune 22, 2007
cpanelCross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1...CVE-2007-33664.3 MediumJune 22, 2007
cpanel webhost managerCross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM)...CVE-2007-0890Public exploit4.3 MediumFebruary 12, 2007
cpanel webhost managerRemote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows...CVE-2007-08547.5 HighFebruary 8, 2007
cpanel webhost managerMultiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow...CVE-2006-65483.5 LowDecember 14, 2006
cpanelCross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows...CVE-2006-6523Public exploit6.8 MediumDecember 14, 2006
cpanel webhost managerMultiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow...CVE-2006-6198Public exploit6.0 MediumDecember 1, 2006
cpanelMultiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users...CVE-2006-5883Public exploit3.5 LowNovember 14, 2006
cpanelMultiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0...CVE-2006-5535Public exploit4.3 MediumOctober 26, 2006
cpanelUnspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to...CVE-2006-5014Public exploit9.0 HighSeptember 27, 2006
cpanelMultiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject...CVE-2006-4293Public exploit4.3 MediumAugust 22, 2006
cpanelCross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT...CVE-2006-3337Public exploit2.6 LowJuly 3, 2006
cpanelcPanel does not automatically synchronize the PHP open_basedir configuration directive between...CVE-2006-28255.1 MediumJune 5, 2006
cpanelCross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote...CVE-2006-07634.3 MediumFebruary 18, 2006
cpanelCross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers...CVE-2006-05744.3 MediumFebruary 7, 2006
cpanelMultiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers...CVE-2006-05734.3 MediumFebruary 7, 2006
cpanelCross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to...CVE-2006-05334.3 MediumFebruary 4, 2006
cpanelCross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6...CVE-2005-35054.3 MediumNovember 5, 2005
cpanelCross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to...CVE-2005-2021Public exploit4.3 MediumJune 20, 2005
cpanelCross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote...CVE-2004-2308Public exploit4.3 MediumDecember 31, 2004
cpanelcPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files...CVE-2004-16035.5 MediumOctober 18, 2004
cpanelcPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink...CVE-2004-16045.0 MediumSeptember 30, 2004
cpanelcPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the -...CVE-2004-0490Public exploit7.2 HighJune 3, 2004
cpanelMultiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to...CVE-2004-1875Public exploit9.3 HighMarch 30, 2004
cpanelMultiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to...CVE-2004-18494.3 MediumMarch 24, 2004
cpanelThe login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute...CVE-2004-1770Public exploitEPSS 10.2%10.0 HighMarch 11, 2004
cpanelThe "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and...CVE-2004-1769Public exploitEPSS 34.8%10.0 HighMarch 11, 2004
cpanelOpenwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME...CVE-2003-14263.3 LowDecember 31, 2003
cpanelguestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the...CVE-2003-1425Public exploitEPSS 11.5%10.0 HighDecember 31, 2003
cpanelCross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert...CVE-2003-0521Public exploit6.8 MediumJuly 10, 2003