Skip to contentCpanel vulnerabilities
Newest
- cpanelcPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated...CVE-2018-208646.5 Medium
- cpanelcPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list...CVE-2018-208639.8 Critical
- cpanelIn cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).CVE-2019-144143.3 Low
- cpanelcPanel before 78.0.2 allows certain file-write operations as shared users during connection...CVE-2019-144134.3 Medium
- cpanelMaketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns...CVE-2019-144123.3 Low
- cpanelcPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV...CVE-2019-144115.3 Medium
- cpanelMaketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI ...CVE-2019-144103.3 Low
- cpanelcPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).CVE-2019-144095.5 Medium
- cpanelcPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460).CVE-2019-144084.3 Medium
- cpanelcPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415).CVE-2019-144072.7 Low
- cpanelcPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493).CVE-2019-144066.1 Medium
- cpanelcPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487).CVE-2019-144058.8 High
- cpanelcPanel before 78.0.18 allows certain file-read operations in the context of the root account via...CVE-2019-144045.5 Medium
- cpanelcPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC...CVE-2019-144034.3 Medium
- cpanelcPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481).CVE-2019-144023.3 Low
- cpanelcPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480).CVE-2019-144018.8 High
- cpanelcPanel before 78.0.18 allows local users to escalate to root access because of userdata cache...CVE-2019-144007.8 High
- cpanelThe SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the...CVE-2019-143997.1 High
- cpanelcPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util...CVE-2019-143988.8 High
- cpanelcPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call...CVE-2019-143975.3 Medium
- cpanelAPI Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data (SEC-495).CVE-2019-143963.3 Low
- cpanelcPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494).CVE-2019-143953.3 Low
- cpanelcPanel before 80.0.5 allows unsafe file operations in the context of the root account via the...CVE-2019-143945.5 Medium
- cpanelcPanel before 80.0.5 allows local code execution in the context of a different cPanel account...CVE-2019-143935.3 Medium
- cpanelcPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI...CVE-2019-143928.8 High
- cpanelcPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).CVE-2018-208676.1 Medium
- cpanelcPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514).CVE-2019-143913.3 Low
- cpanelcPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512).CVE-2019-143905.4 Medium
- cpanelcPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510).CVE-2019-143897.8 High
- cpanelcPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled ...CVE-2019-143887.5 High
- cpanelcPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506).CVE-2019-143876.1 Medium
- cpanelcPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504).CVE-2019-143865.4 Medium
- cpanelcPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account,...CVE-2018-162366.1 Medium
- cpanel whmThe WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0...CVE-2017-114415.4 Medium
- cpanel cgiecho, cgiemail +1 moreCross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to...CVE-2017-5616Fix available6.1 Medium
- cpanel cgiecho, cgiemail +1 morecgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the...CVE-2017-5615Fix available6.1 Medium
- cpanelOpen redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to...CVE-2017-5614Fix available6.1 Medium
- cpanel cgiecho, cgiemail +1 moreFormat string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary...CVE-2017-5613Fix available7.8 High
- cpanelCross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through...CVE-2009-4823Public exploit4.3 Medium
- cpanelAbsolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html)...CVE-2008-7142Public exploit5.0 Medium
- cpanelMultiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in...CVE-2008-6927Public exploit4.3 Medium
- cpanel, netenberg fantastico de luxe +1 moreDirectory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows...CVE-2008-6843Public exploit5.0 Medium
- cpanelDirectory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote...CVE-2009-2275Public exploit5.0 Medium
- cpanel** DISPUTED ** scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and...CVE-2008-2478Public exploitDisputed8.5 High
- cpanelMultiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for...CVE-2008-20714.3 Medium
- cpanelThe WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote...CVE-2008-2070Public exploit4.3 Medium
- cpanelMultiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19...CVE-2008-20434.3 Medium
- cpanelCross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0...CVE-2008-1499Public exploit4.3 Medium
- cpanelCross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417...CVE-2008-03704.3 Medium
- cpanelCross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1...CVE-2007-4022Public exploit4.3 Medium
- Show moreLoading…