Cpanel: >> Cpanel >> 62.0.15 Security Vulnerabilities
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).
CVSS Score
3.8
EPSS Score
0.002
Published
2019-08-02
cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332).
CVSS Score
3.7
EPSS Score
0.002
Published
2019-08-02
cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333).
CVSS Score
7.8
EPSS Score
0.002
Published
2019-08-02
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).
CVSS Score
2.7
EPSS Score
0.003
Published
2019-08-02
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-02
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).
CVSS Score
2.7
EPSS Score
0.003
Published
2019-08-02
cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
CVSS Score
7.8
EPSS Score
0.001
Published
2019-08-02
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).
CVSS Score
3.8
EPSS Score
0.001
Published
2019-08-02
cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-02
cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).
CVSS Score
7.2
EPSS Score
0.02
Published
2019-08-02