Cpanel

Cpanel

416 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2007-3366

  • EPSS 0.33%
  • Veröffentlicht 22.06.2007 18:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information i...

7.8

CVE-2007-3367

  • EPSS 0.42%
  • Veröffentlicht 22.06.2007 18:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message. NOTE: the provenance of this information...

6.8

CVE-2006-6523

Exploit
  • EPSS 6.09%
  • Veröffentlicht 14.12.2006 01:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inject arbitrary web script or HTML via the account parameter.

3.5

CVE-2006-5883

Exploit
  • EPSS 1.22%
  • Veröffentlicht 14.11.2006 19:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.

4.3

CVE-2006-5535

Exploit
  • EPSS 1.04%
  • Veröffentlicht 26.10.2006 17:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to s...

9

CVE-2006-5014

  • EPSS 1.48%
  • Veröffentlicht 27.09.2006 01:07:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.

4.3

CVE-2006-4293

Exploit
  • EPSS 1.93%
  • Veröffentlicht 22.08.2006 17:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.

2.6

CVE-2006-3337

  • EPSS 1.04%
  • Veröffentlicht 03.07.2006 18:05:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter.

5.1

CVE-2006-2825

Exploit
  • EPSS 0.47%
  • Veröffentlicht 05.06.2006 17:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass open_basedir restrictions and access other virt...

4.3

CVE-2006-0763

Exploit
  • EPSS 0.32%
  • Veröffentlicht 18.02.2006 02:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via a URL encoded value in the fwd parameter.