cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383)

cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392)

cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391)

cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377)

cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376)

cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375)

cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374)

cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373)

cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372)

cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357)

cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421)

cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400)

cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399)

cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398)

cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493)

cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464)

cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461)

cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459)

cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462)

cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506)

cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account, because the filename is mishandled during frontend/THEME/raw/index.html rendering

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1)…

cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247)

bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354)

cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349)

In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584)

cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532)

cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137)

cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254)

cPanel before 67.9999.103 allows arbitrary file-overwrite operations during a Roundcube SQLite schema update (SEC-303)

cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345)

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329)

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311)

cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356)

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378)

cPanel before 70.0.23 allows any user to disable Solr (SEC-371)

cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435)

cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408)

cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436)

cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424)

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466)

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484)

cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetch_ssl_certificates_for_fqdns API (SEC-489)

The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467)

cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when…

cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533)

cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions (SEC-508)

The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability

cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110)

cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184)