Approved changes feed: RSS · Atom
cpe:2.3:a:cpanel:cpanel:11.18.3:*:*:*:*:*:*:*
part: a version: 11.18.3 update: *
| Vendor | Cpanel (dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28) |
|---|---|
| Product | Cpanel (26341cf1-5984-59b7-b69e-a9a0ad62c538) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-4823 |
vulnerable | 2026-06-08 04:51:50.055047 |
Details available
Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter.
Published: 2010-04-27T15:00:00.000Z
Updated: 2024-08-07T07:17:25.553Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7142 |
vulnerable | 2026-06-08 04:51:05.684920 |
Details available
Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter.
Published: 2009-09-01T16:00:00.000Z
Updated: 2024-08-07T11:56:14.302Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6843 |
vulnerable | 2026-06-08 04:51:04.935701 |
Details available
Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter.
Published: 2009-07-02T10:00:00.000Z
Updated: 2024-08-07T11:42:00.327Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2071 |
vulnerable | 2026-06-08 04:50:22.832994 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors.
Published: 2008-05-12T16:00:00.000Z
Updated: 2024-08-07T08:49:57.579Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2070 |
vulnerable | 2026-06-08 04:50:22.830399 |
Details available
The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "<" and ">" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors.
Published: 2008-05-12T16:00:00.000Z
Updated: 2024-08-07T08:49:57.763Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2043 |
vulnerable | 2026-06-08 04:50:22.741658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1499 |
vulnerable | 2026-06-08 04:50:20.806680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.