Page 13 of 123 results (0.006 seconds)

CVSS: 10.0EPSS: 26%CPEs: 12EXPL: 4

CVE-2004-1769 – cPanel 5/6/7/8/9 - Resetpass Remote Command Execution

https://notcve.org/view.php?id=CVE-2004-1769

11 Mar 2004 — The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass. • https://www.exploit-db.com/exploits/23804 •

CVSS: 10.0EPSS: 43%CPEs: 12EXPL: 3

CVE-2004-1770 – cPanel 5/6/7/8/9 - Login Script Remote Command Execution

https://notcve.org/view.php?id=CVE-2004-1770

11 Mar 2004 — The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter. • https://www.exploit-db.com/exploits/23807 •

CVSS: 6.8EPSS: 1%CPEs: 8EXPL: 1

CVE-2003-0521 – CPanel 5.0/5.3/6.x - Admin Interface HTML Injection

https://notcve.org/view.php?id=CVE-2003-0521

10 Jul 2003 — Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens. Vulnerabilidad de secuenicias de comandos en sitios cruzados (XSS) en cPanel 6.4.2 permite a atacantes remotos insertar HTML arbitrario y posiblemente ganar privilegios de adminstrador de cPanel mediante código en una URL que es... • https://www.exploit-db.com/exploits/22874 •