9.0Kritik
Webpros cPanel; Webpros WP Squared
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.
WebPros WP Squared güvenlik açıkları (CVE)
WebPros WP Squared için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
9.0Kritik
Webpros cPanel; Webpros WP Squared
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
9.9Kritik
Webpros cPanel; Webpros WP Squared
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.
9.4Kritik
WebPros cPanel; WebPros WP Squared
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
5.6Orta
WebPros cPanel; WebPros WP Squared
HTTP Smuggling in cPanel allows potential leak of credentials.
7.1Yüksek
WebPros cPanel; WebPros WP Squared; WebPros cPanel (CloudLinux 6, CentOS 6)
Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner account.
8.1Yüksek
WebPros cPanel; WebPros WP Squared; WebPros cPanel (CloudLinux 6, CentOS 6)
Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled.
8.3Yüksek
WebPros cPanel; WebPros WP Squared
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response.
8.2Yüksek
WebPros cPanel; WebPros WP Squared
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
8.6Yüksek
WebPros cPanel; WebPros WP Squared
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
8.4%EPSS
5.3Orta
WebPros cPanel; WebPros cPanel (CloudLinux 6, CentOS 6); WebPros WP Squared
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories. That can cause DoS or local privilege escalation when an authenticated cPanel user places a symlink …
5.3Orta
WebPros cPanel; WebPros cPanel (CloudLinux 6, CentOS 6); WebPros WP Squared
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
1.9%EPSS
8.6Yüksek
WebPros cPanel; WebPros WP Squared; WebPros cPanel (CloudLinux 6, CentOS 6)
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.
9.8Kritik
WebPros cPanel and WHM Authentication Bypass via Login Flow
WebPros cPanel; WebPros WP Squared; WebPros WHM
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
99%EPSS