Cpanel: >> Cpanel >> 66.0.25 Security Vulnerabilities
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
CVSS Score
5.7
EPSS Score
0.002
Published
2019-08-01
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355).
CVSS Score
3.3
EPSS Score
0.0
Published
2019-08-01
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01