CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-26115
https://notcve.org/view.php?id=CVE-2020-26115
25 Sep 2020 — cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574). cPanel versiones anteriores a 90.0.10, permite un ataque de tipo auto-XSS por medio de la interfaz Cron Editor. (SEC-574) • https://docs.cpanel.net/changelogs/90-change-log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2020-10120
https://notcve.org/view.php?id=CVE-2020-10120
17 Mar 2020 — cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). cPanel versiones anteriores a 84.0.20, permite a revendedores lograr una ejecución de código remota como root por medio de un shell cpsrvd rsync (SEC-545). • https://documentation.cpanel.net/display/CL/84+Change+Log •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2020-10119
https://notcve.org/view.php?id=CVE-2020-10119
17 Mar 2020 — cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544). cPanel versiones anteriores a 84.0.20, permite a una cuenta demo lograr una ejecución de código remota por medio de un shell cpsrvd rsync (SEC-544). • https://documentation.cpanel.net/display/CL/84+Change+Log •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 1CVE-2012-6449
https://notcve.org/view.php?id=CVE-2012-6449
10 Feb 2020 — The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. Las páginas clientconf.html y detailbw.html en x3 en cPanel & WHM versión 11.34.0 (build 8), presentan una vulnerabilidad de tipo XSS. • https://packetstormsecurity.com/files/119113/C-Panel-WHM-11.34.0-Cross-Site-Scripting.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2019-17380
https://notcve.org/view.php?id=CVE-2019-17380
09 Oct 2019 — cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528). cPanel versiones anteriores a 82.0.15, permite un ataque de tipo XSS propio en la interfaz WHM Update Preferences (SEC-528). • https://documentation.cpanel.net/display/CL/82+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.0EPSS: 0%CPEs: 1EXPL: 0CVE-2017-18426
https://notcve.org/view.php?id=CVE-2017-18426
02 Aug 2019 — cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288). cPanel anterior a versión 66.0.2, permite a los proveedores (resellers) leer los archivos de registro de dominio de otras cuentas (SEC-288). • https://documentation.cpanel.net/display/CL/66+Change+Log • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2017-18420
https://notcve.org/view.php?id=CVE-2017-18420
02 Aug 2019 — cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269). cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante el procesamiento de cPAddons de WHM (SEC-269). • https://documentation.cpanel.net/display/CL/66+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2017-18419
https://notcve.org/view.php?id=CVE-2017-18419
02 Aug 2019 — cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266). cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante la desinstalación de cPAddons de WHM (SEC-266). • https://documentation.cpanel.net/display/CL/66+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2017-18418
https://notcve.org/view.php?id=CVE-2017-18418
02 Aug 2019 — cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265). cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante las operaciones de archivos de cPAddons de WHM (SEC-265). • https://documentation.cpanel.net/display/CL/66+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2017-18417
https://notcve.org/view.php?id=CVE-2017-18417
02 Aug 2019 — cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263). cPanel anterior a versión 66.0.2, permite un ataque de tipo XSS almacenado durante la instalación de WHM (SEC-263). • https://documentation.cpanel.net/display/CL/66+Change+Log • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •