Vulnerabilities > Cpanel > Cpanel > 11.50.1.2

DATE CVE VULNERABILITY TITLE RISK
2019-08-01 CVE-2016-10829 Files or Directories Accessible to External Parties vulnerability in Cpanel
cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).
network
low complexity
cpanel CWE-552
6.8
2019-08-01 CVE-2016-10828 Path Traversal vulnerability in Cpanel
cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).
network
low complexity
cpanel CWE-22
critical
9.0
2019-08-01 CVE-2016-10827 Cross-site Scripting vulnerability in Cpanel
cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).
network
cpanel CWE-79
3.5
2019-08-01 CVE-2016-10825 Improperly Implemented Security Check for Standard vulnerability in Cpanel
cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).
network
low complexity
cpanel CWE-358
5.5
2019-08-01 CVE-2016-10824 Improper Input Validation vulnerability in Cpanel
cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).
network
cpanel CWE-20
critical
9.3
2019-08-01 CVE-2016-10823 Improper Input Validation vulnerability in Cpanel
cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).
network
low complexity
cpanel CWE-20
critical
9.0
2019-08-01 CVE-2016-10822 Cross-site Scripting vulnerability in Cpanel
cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).
network
cpanel CWE-79
3.5
2019-08-01 CVE-2016-10849 Command Injection vulnerability in Cpanel
cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82).
network
low complexity
cpanel CWE-77
4.0
2019-08-01 CVE-2016-10848 Improper Authorization vulnerability in Cpanel
cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81).
network
low complexity
cpanel CWE-285
critical
9.0
2019-08-01 CVE-2016-10847 Injection vulnerability in Cpanel
cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).
network
low complexity
cpanel CWE-74
5.5