Skip to contentCpanel vulnerabilities
Newest
- cpanelcPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).CVE-2016-108566.5 Medium
- cpanelcPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).CVE-2016-108576.5 Medium
- cpanelcPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry...CVE-2016-108589.8 Critical
- cpanelcPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).CVE-2016-108598.1 High
- cpanelcPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).CVE-2016-108608.1 High
- cpanelcPanel before 11.52.0.13 does not prevent arbitrary file-read operations via...CVE-2015-92917.5 High
- cpanelcPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).CVE-2018-209106.1 Medium
- cpanelcPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups ...CVE-2018-209097.1 High
- cpanelcPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template...CVE-2018-209085.5 Medium
- cpanelcPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).CVE-2018-209074.3 Medium
- cpanelcPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature...CVE-2018-209064.3 Medium
- cpanelcPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature...CVE-2018-209055.4 Medium
- cpanelcPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature...CVE-2018-209044.3 Medium
- cpanelcPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).CVE-2018-209036.1 Medium
- cpanelcPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV...CVE-2018-209025.5 Medium
- cpanelcPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).CVE-2018-209016.1 Medium
- cpanelcPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).CVE-2018-209006.1 Medium
- cpanelcPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).CVE-2018-208996.1 Medium
- cpanelcPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).CVE-2018-208984.3 Medium
- cpanelcPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation...CVE-2018-208972.8 Low
- cpanelcPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).CVE-2018-208963.9 Low
- cpanelIn cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the...CVE-2018-208957.2 High
- cpanelcPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories...CVE-2018-208943.3 Low
- cpanelcPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).CVE-2018-208932.3 Low
- cpanelcPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record...CVE-2018-208924.3 Medium
- cpanelcPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).CVE-2018-208915.5 Medium
- cpanelcPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).CVE-2018-208904.3 Medium
- cpanelcPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).CVE-2018-208894.4 Medium
- cpanelcPanel before 74.0.0 allows file modification in the context of the root account because of...CVE-2018-208885.5 Medium
- cpanelcPanel before 74.0.0 allows SQL injection during database backups (SEC-420).CVE-2018-208879.8 Critical
- cpanelcPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).CVE-2018-208865.3 Medium
- cpanelcPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot...CVE-2018-208855.3 Medium
- cpanelcPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).CVE-2018-208845.4 Medium
- cpanelcPanel before 74.0.8 allows FTP access during account suspension (SEC-449).CVE-2018-208836.5 Medium
- cpanelcPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account...CVE-2018-208826.8 Medium
- cpanelcPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).CVE-2018-208815.4 Medium
- cpanelcPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file...CVE-2018-208803.3 Low
- cpanelcPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API...CVE-2018-208796.3 Medium
- cpanelcPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).CVE-2018-208785.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).CVE-2018-208775.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).CVE-2018-208765.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).CVE-2018-208755.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).CVE-2018-208745.4 Medium
- cpanelcPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).CVE-2018-208733.3 Low
- cpanelThe WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).CVE-2018-208705.5 Medium
- cpanelcPanel before 76.0.8 allows arbitrary code execution in the context of the root account via...CVE-2018-208697.8 High
- cpanelcPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).CVE-2018-208627.8 High
- cpanelcPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).CVE-2018-208686.1 Medium
- cpanelcPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).CVE-2018-208666.1 Medium
- cpanelcPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).CVE-2018-208656.1 Medium
- Show moreLoading…