Filter
AND
-Infinity
0

cPanelcPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsist…

8.8
First published (updated )

cPanelcPanel before 55.9999.141 allows account-suspension bypass via ftp (SEC-105).

8.8
First published (updated )

cPanelInput Validation

8.8
First published (updated )

cPanelcPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispat…

8.8
First published (updated )

cPanelcPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480).

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

cPanelcPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the passwo…

8.8
First published (updated )

cPanelcPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or t…

8.8
First published (updated )

cPanelcPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).

8.8
First published (updated )

cPanelcPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI…

8.8
First published (updated )

cPanelInput Validation

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

cPanelInput Validation

8.8
First published (updated )

cPanelInput Validation

8.8
First published (updated )

cPanelcPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

8.8
First published (updated )

cPanelcPanel before 58.0.4 has improper session handling for shared users (SEC-139).

8.8
First published (updated )

cPanelcPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list ar…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

cPanelInput Validation

8.8
First published (updated )

cPanelInput Validation

8.8
First published (updated )

cPanelcPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering re…

8.8
First published (updated )

cPanelcPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487).

8.8
First published (updated )

cPanelcPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

cPanelInput Validation, SQL Injection

8.7
First published (updated )

cPanelCode Injection

8.5
First published (updated )

cPanelcPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube datab…

8.5
First published (updated )

cPanelcPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).

8.5
First published (updated )

cPanelIn cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587)…

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

cPanelIn cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of file…

8.1
First published (updated )

cPanelInput Validation

8.1
First published (updated )

cPanelcPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).

8.1
First published (updated )

cPanelcPanel before 86.0.14 allows attackers to obtain access to the current working directory via the acc…

8.1
First published (updated )

cPanelInput Validation

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203