Approved changes feed: RSS · Atom

cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorCpanel (dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28)
ProductCpanel (26341cf1-5984-59b7-b69e-a9a0ad62c538)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5014 vulnerable 2026-06-08 04:49:19.489758 Details available
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.
Published: 2006-09-27T01:00:00.000Z
Updated: 2025-04-03T15:20:50.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0573 vulnerable 2026-06-08 04:48:54.540976 Details available
Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html.
Published: 2006-02-07T18:00:00.000Z
Updated: 2024-08-07T16:41:28.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2021 vulnerable 2026-06-08 04:48:28.103657 Details available
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page.
Published: 2005-06-21T04:00:00.000Z
Updated: 2024-09-17T02:11:19.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2308 vulnerable 2026-06-08 04:48:09.222813 Details available
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1849 vulnerable 2026-06-08 04:48:07.848183 Details available
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1770 vulnerable 2026-06-08 04:48:07.567183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1769 vulnerable 2026-06-08 04:48:07.566505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0490 vulnerable 2026-06-08 04:47:49.972277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.