Vulnerabilities > Cpanel > Cpanel > 11.21

DATE CVE VULNERABILITY TITLE RISK
2010-04-27 CVE-2009-4823 Cross-Site Scripting vulnerability in Cpanel
Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter.
network
cpanel CWE-79
4.3
2009-07-02 CVE-2008-6843 Path Traversal vulnerability in multiple products
Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a ..
network
low complexity
netenberg cpanel CWE-22
5.0
2008-03-25 CVE-2008-1499 Cross-Site Scripting vulnerability in Cpanel 11.18.3/11.21
Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string.
network
cpanel CWE-79
4.3