Browse CVEs

MEDIUM 5.4 CVE-2012-6449 The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. Cpanel No fix yet Fix from $1,6002020-02-10 MEDIUM 6.1 CVE-2012-6448 Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vec… Webhost Manager No fix yet Fix from $1,6002020-01-27 MEDIUM 6.1 CVE-2017-5616 Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum para… Cgiecho Mitigation only Fix from $1,6002017-03-03 HIGH 7.8 CVE-2017-5613 Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file. Cgiecho Mitigation only Fix from $1,9502017-03-03 MEDIUM 6.1 CVE-2017-5615 cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location. Cgiecho Mitigation only Fix from $1,6002017-03-03 MEDIUM 5.0 CVE-2008-7142 Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list ar… Cpanel No fix yet Fix from $1,6002009-09-01 MEDIUM 5.0 CVE-2009-2275 Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. (dot dot) in… Cpanel No fix yet Fix from $1,6002009-07-01 HIGH 7.5 CVE-2007-0854EPSS 6% Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code via a URL … Webhost Manager No fix yet Fix from $1,9502007-02-08 MEDIUM 6.8 CVE-2006-6523 Cross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inject arbitrary web script or HTM… Cpanel No fix yet Fix from $1,6002006-12-14 MEDIUM 6.0 CVE-2006-6198 Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web sc… Webhost Manager No fix yet Fix from $1,6002006-12-01 MEDIUM 5.1 CVE-2006-2825 cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virtual hosts that share physical … Cpanel No fix yet Fix from $1,6002006-06-05 MEDIUM 5.0 CVE-2004-1604 cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created wh… Cpanel Mitigation only Fix from $1,6002004-09-30 HIGH 7.2 CVE-2004-0490 cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use th… Cpanel No fix yet Fix from $1,9502004-08-18 HIGH 10.0 CVE-2004-1769EPSS 35% The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to ex… Cpanel No fix yet Fix from $1,9502004-03-11 HIGH 10.0 CVE-2003-1425EPSS 11% guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter. Cpanel No fix yet Fix from $1,9502003-12-31 MEDIUM 6.8 CVE-2003-0521 Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator priv… Cpanel Mitigation only Fix from $1,6002003-08-18