Vulnerabilities > Cpanel > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-08-06 CVE-2016-10795 Cross-site Scripting vulnerability in Cpanel
cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).
network
cpanel CWE-79
4.3
2019-08-06 CVE-2016-10794 Information Exposure vulnerability in Cpanel
cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).
network
low complexity
cpanel CWE-200
4.0
2019-08-06 CVE-2016-10793 Improper Input Validation vulnerability in Cpanel
cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).
network
low complexity
cpanel CWE-20
6.5
2019-08-06 CVE-2016-10792 Improper Access Control vulnerability in Cpanel
cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).
network
low complexity
cpanel CWE-284
6.5
2019-08-06 CVE-2016-10791 Credentials Management vulnerability in Cpanel
cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559).
network
low complexity
cpanel CWE-255
5.0
2019-08-06 CVE-2016-10790 Information Exposure vulnerability in Cpanel
cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).
network
low complexity
cpanel CWE-200
5.0
2019-08-06 CVE-2016-10789 Improper Input Validation vulnerability in Cpanel
cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).
network
low complexity
cpanel CWE-20
6.5
2019-08-06 CVE-2016-10787 Improper Input Validation vulnerability in Cpanel
The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).
network
low complexity
cpanel CWE-20
5.5
2019-08-06 CVE-2016-10786 Information Exposure vulnerability in Cpanel
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).
network
low complexity
cpanel CWE-200
4.0
2019-08-06 CVE-2016-10785 Information Exposure vulnerability in Cpanel
cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185).
network
low complexity
cpanel CWE-200
4.0