Page 21 of 205 results (0.006 seconds)

CVSS: 10.0EPSS: 26%CPEs: 12EXPL: 4

CVE-2004-1769 – cPanel 5/6/7/8/9 - Resetpass Remote Command Execution

https://notcve.org/view.php?id=CVE-2004-1769

11 Mar 2004 — The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass. • https://www.exploit-db.com/exploits/23804 •

CVSS: 10.0EPSS: 43%CPEs: 12EXPL: 3

CVE-2004-1770 – cPanel 5/6/7/8/9 - Login Script Remote Command Execution

https://notcve.org/view.php?id=CVE-2004-1770

11 Mar 2004 — The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter. • https://www.exploit-db.com/exploits/23807 •

CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 5

CVE-2003-1425 – cPanel 5.0 - 'Guestbook.cgi' Remote Command Execution

https://notcve.org/view.php?id=CVE-2003-1425

31 Dec 2003 — guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter. • https://www.exploit-db.com/exploits/22260 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2003-1426

https://notcve.org/view.php?id=CVE-2003-1426

31 Dec 2003 — Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable. • http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html • CWE-16: Configuration •

CVSS: 6.8EPSS: 1%CPEs: 8EXPL: 1

CVE-2003-0521 – CPanel 5.0/5.3/6.x - Admin Interface HTML Injection

https://notcve.org/view.php?id=CVE-2003-0521

10 Jul 2003 — Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens. Vulnerabilidad de secuenicias de comandos en sitios cruzados (XSS) en cPanel 6.4.2 permite a atacantes remotos insertar HTML arbitrario y posiblemente ganar privilegios de adminstrador de cPanel mediante código en una URL que es... • https://www.exploit-db.com/exploits/22874 •