Cpanel: >> Cpanel >> 11.48.0.9 Security Vulnerabilities
cPanel before 11.54.0.4 allows arbitrary file-read operations via the bin/fmq script (SEC-70).
CVSS Score
6.5
EPSS Score
0.002
Published
2019-08-01
cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).
CVSS Score
8.1
EPSS Score
0.003
Published
2019-08-01
cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).
CVSS Score
8.8
EPSS Score
0.009
Published
2019-08-01
The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).
CVSS Score
5.3
EPSS Score
0.003
Published
2019-08-01
cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).
CVSS Score
6.5
EPSS Score
0.003
Published
2019-08-01
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API (SEC-76).
CVSS Score
8.1
EPSS Score
0.008
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01