Skip to contentCpanel vulnerabilities
Newest
- cpanelcPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).CVE-2016-107795.4 Medium
- cpanelcPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).CVE-2016-107775.4 Medium
- cpanelcPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).CVE-2016-107785.4 Medium
- cpanelcPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account...CVE-2016-107765.4 Medium
- cpanelcPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft ...CVE-2016-107756.5 Medium
- cpanelcPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172).CVE-2016-107745.4 Medium
- cpanelcPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).CVE-2016-107738.8 High
- cpanelcPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang...CVE-2016-107723.3 Low
- cpanelcPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit...CVE-2016-107718.1 High
- cpanelcPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC...CVE-2016-107706.5 Medium
- cpanelcPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162).CVE-2016-107696.1 Medium
- cpanelcPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC...CVE-2016-107686.5 Medium
- cpanelcPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).CVE-2016-107675.4 Medium
- cpanelcPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non...CVE-2017-184826.5 Medium
- cpanelcPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).CVE-2017-184815.4 Medium
- cpanelcPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls ...CVE-2017-184806.5 Medium
- cpanelIn cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).CVE-2017-184796.5 Medium
- cpanelIn cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions...CVE-2017-184786.5 Medium
- cpanelIn cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC...CVE-2017-184776.5 Medium
- cpanelLeech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).CVE-2017-184767.5 High
- cpanelIn cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when...CVE-2017-184758.8 High
- cpanelcPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).CVE-2017-184746.5 Medium
- cpanelcPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).CVE-2017-184735.4 Medium
- cpanelcPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).CVE-2017-184726.1 Medium
- cpanelcPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).CVE-2017-184715.4 Medium
- cpanelcPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).CVE-2017-184708.8 High
- cpanelcPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC...CVE-2017-184696.3 Medium
- cpanelcPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API...CVE-2017-184686.3 Medium
- cpanelcPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC...CVE-2017-184674.3 Medium
- cpanelcPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).CVE-2017-184654.4 Medium
- cpanelcPanel before 62.0.17 does not properly recognize domain ownership during addition of parked...CVE-2017-184662.7 Low
- cpanelcPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor...CVE-2017-184644.9 Medium
- cpanelcPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC...CVE-2017-184627.5 High
- cpanelcPanel before 62.0.17 allows code execution in the context of the root account via a long...CVE-2017-184637.8 High
- cpanelcPanel before 62.0.17 allows does not preserve security policy questions across an account rename...CVE-2017-184614.3 Medium
- cpanelcPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).CVE-2017-184607.8 High
- cpanelcPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).CVE-2017-184597.8 High
- cpanelcPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).CVE-2017-184583.3 Low
- cpanelcPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).CVE-2017-184574.4 Medium
- cpanelcPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).CVE-2017-184566.1 Medium
- cpanelIn cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).CVE-2017-184552.7 Low
- cpanelcPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).CVE-2017-184545.4 Medium
- cpanelcPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).CVE-2017-184534.9 Medium
- cpanelcPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).CVE-2017-184526.7 Medium
- cpanelcPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval...CVE-2017-184515.3 Medium
- cpanelcPanel before 64.0.21 allows certain file-chmod operations via /scripts...CVE-2017-184504.5 Medium
- cpanelcPanel before 64.0.21 allows certain file-rename operations in the context of the root account...CVE-2017-184495.5 Medium
- cpanelcPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC...CVE-2017-184485.3 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC...CVE-2017-184476.3 Medium
- cpanelcPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the...CVE-2017-184466.3 Medium
- Show moreLoading…