Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Cpanel
(Cpanel)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 415 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2019-08-02 | CVE-2017-18414 | cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300). | Cpanel | 7.4 | ||
| 2019-08-02 | CVE-2017-18413 | In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299). | Cpanel | 7.8 | ||
| 2019-08-02 | CVE-2017-18412 | cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296). | Cpanel | 2.5 | ||
| 2019-08-02 | CVE-2017-18411 | The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285). | Cpanel | 6.8 | ||
| 2019-08-02 | CVE-2017-18410 | In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284). | Cpanel | 6.5 | ||
| 2019-08-02 | CVE-2017-18409 | In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283). | Cpanel | 6.5 | ||
| 2019-08-02 | CVE-2017-18408 | cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282). | Cpanel | 5.4 | ||
| 2019-08-02 | CVE-2017-18407 | cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279). | Cpanel | 4.8 | ||
| 2019-08-02 | CVE-2017-18406 | cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276). | Cpanel | 7.5 | ||
| 2019-08-02 | CVE-2017-18405 | cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345). | Cpanel | 5.5 |