|
249331
|
5.4 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).
|
CWE-79
Cross-site Scripting
|
CVE-2017-18481
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249332
|
6.5 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).
|
CWE-254
7PK - Security Features
|
CVE-2017-18480
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249333
|
6.5 |
MEDIUM
Network
|
cpanel
|
cpanel
|
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).
|
CWE-295
Improper Certificate Validation
|
CVE-2017-18479
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249334
|
6.5 |
MEDIUM
Network
|
cpanel
|
cpanel
|
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions (SEC-207).
|
CWE-200
Information Exposure
|
CVE-2017-18478
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249335
|
6.5 |
MEDIUM
Network
|
cpanel
|
cpanel
|
In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).
|
CWE-254
7PK - Security Features
|
CVE-2017-18477
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249336
|
7.5 |
HIGH
Network
|
cpanel
|
cpanel
|
Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).
|
CWE-254
7PK - Security Features
|
CVE-2017-18476
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249337
|
8.8 |
HIGH
Network
|
cpanel
|
cpanel
|
In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user (SEC-204).
|
CWE-20
Improper Input Validation
|
CVE-2017-18475
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249338
|
6.5 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).
|
CWE-200
Information Exposure
|
CVE-2017-18474
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249339
|
5.4 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).
|
CWE-79
Cross-site Scripting
|
CVE-2017-18473
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249340
|
6.1 |
MEDIUM
Network
|
cpanel
|
cpanel
|
cPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).
|
CWE-79
Cross-site Scripting
|
CVE-2017-18472
|
2024-11-21 12:20 |
2019-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|