Filters
Cpanel CpanelcPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).
First published (updated )
Cpanel CpanelcPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable …
8.1
First published (updated )
Cpanel CpanelcPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxp…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelThe bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).
First published (updated )
Cpanel CpanelcPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).
8.5
First published (updated )
Cpanel CpanelcPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).
First published (updated )
Cpanel CpanelcPanel before 11.54.0.0 allows subaccounts to discover sensitive data through comet feeds (SEC-29).
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
6.5
First published (updated )
Cpanel CpanelcPanel before 11.54.0.0 allows a bypass of the e-mail sending limit (SEC-60).
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Cpanel CpanelcPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API (SEC-66).
8.1
First published (updated )