CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Cpanel » Cpanel » 62.0.47 : Security Vulnerabilities

Cpe Name:cpe:/a:cpanel:cpanel:62.0.47
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2018-20883 20 2019-08-01 2019-08-02
4.0
None Remote Low Single system None Partial None
cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).
52 CVE-2018-20881 79 XSS 2019-08-01 2019-08-01
3.5
None Remote Medium Single system None Partial None
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).
53 CVE-2018-20880 19 2019-08-01 2019-08-02
2.1
None Local Low Not required None None Partial
cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).
54 CVE-2018-20879 20 Exec Code 2019-08-01 2019-08-01
6.5
None Remote Low Single system Partial Partial Partial
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).
55 CVE-2018-20878 79 XSS 2019-08-01 2019-08-01
3.5
None Remote Medium Single system None Partial None
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).
56 CVE-2018-20877 79 XSS 2019-08-01 2019-08-01
3.5
None Remote Medium Single system None Partial None
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).
57 CVE-2018-20876 79 XSS 2019-08-01 2019-08-01
3.5
None Remote Medium Single system None Partial None
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).
58 CVE-2018-20875 79 XSS 2019-08-01 2019-08-01
3.5
None Remote Medium Single system None Partial None
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).
59 CVE-2018-20870 200 +Info 2019-07-30 2019-07-31
2.1
None Local Low Not required Partial None None
The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).
60 CVE-2018-20869 20 Exec Code 2019-07-30 2019-07-31
7.2
None Local Low Not required Complete Complete Complete
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465).
61 CVE-2018-20868 79 XSS 2019-07-30 2019-07-30
4.3
None Remote Medium Not required None Partial None
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).
62 CVE-2018-20867 601 2019-07-30 2019-07-30
5.8
None Remote Medium Not required Partial Partial None
cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).
63 CVE-2018-20866 79 XSS 2019-07-30 2019-07-30
4.3
None Remote Medium Not required None Partial None
cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).
64 CVE-2018-20865 79 XSS 2019-07-30 2019-07-30
4.3
None Remote Medium Not required None Partial None
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).
65 CVE-2018-20864 20 2019-07-30 2019-07-31
6.4
None Remote Low Not required Partial Partial None
cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454).
66 CVE-2018-20863 20 Exec Code 2019-07-30 2019-07-31
7.5
None Remote Low Not required Partial Partial Partial
cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452).
67 CVE-2018-20862 255 2019-07-30 2019-07-31
2.1
None Local Low Not required Partial None None
cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).
68 CVE-2017-18426 532 2019-08-02 2019-08-09
4.0
None Remote Low Single system Partial None None
cPanel before 66.0.2 allows resellers to read other accounts' domain log files (SEC-288).
69 CVE-2017-18420 79 XSS 2019-08-02 2019-08-05
3.5
None Remote Medium Single system None Partial None
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing (SEC-269).
70 CVE-2017-18419 79 XSS 2019-08-02 2019-08-05
3.5
None Remote Medium Single system None Partial None
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation (SEC-266).
71 CVE-2017-18418 79 XSS 2019-08-02 2019-08-05
3.5
None Remote Medium Single system None Partial None
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations (SEC-265).
72 CVE-2017-18417 79 XSS 2019-08-02 2019-08-05
3.5
None Remote Medium Single system None Partial None
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation (SEC-263).
73 CVE-2017-18416 284 2019-08-02 2019-08-12
3.6
None Local Low Not required None Partial Partial
cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303).
74 CVE-2017-18415 20 Exec Code 2019-08-02 2019-08-12
4.6
None Local Low Not required Partial Partial Partial
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).
75 CVE-2017-18414 601 2019-08-02 2019-08-12
5.8
None Remote Medium Not required Partial Partial None
cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300).
Total number of vulnerabilities : 74   Page : 1 2 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.