|
249201
|
5.8 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).
|
CWE-20
Improper Input Validation
|
CVE-2017-18443
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249202
|
5.3 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).
|
CWE-77
Command Injection
|
CVE-2017-18442
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249203
|
5.0 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).
|
CWE-601
Open Redirect
|
CVE-2017-18441
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249204
|
4.3 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).
|
CWE-20
Improper Input Validation
|
CVE-2017-18440
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249205
|
6.3 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).
|
CWE-20
Improper Input Validation
|
CVE-2017-18439
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249206
|
6.3 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).
|
CWE-611
XXE
|
CVE-2017-18438
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249207
|
4.4 |
MEDIUM
Local
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).
|
CWE-74
Injection
|
CVE-2017-18437
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249208
|
3.5 |
LOW
Adjacent
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo accounts to read files via a Fileman::getfileactions API2 call (SEC-239).
|
CWE-200
Information Exposure
|
CVE-2017-18436
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249209
|
7.3 |
HIGH
Network
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows demo accounts to execute code via the BoxTrapper API (SEC-238).
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-18435
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249210
|
7.8 |
HIGH
Local
|
cpanel
|
cpanel
|
cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237).
|
CWE-20
Improper Input Validation
|
CVE-2017-18434
|
2024-11-21 12:20 |
2019-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|