GCVE - cpe:2.3:a:cpanel:cpanel:11.18.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cpanel:cpanel:11.18.2:*:*:*:*:*:*:*

part: a version: 11.18.2 update: *

Vendor	Cpanel (`dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28`)
Product	Cpanel (`26341cf1-5984-59b7-b69e-a9a0ad62c538`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4823`	vulnerable	2026-06-08 04:51:50.054538	Details available Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter. Published: 2010-04-27T15:00:00.000Z Updated: 2024-08-07T07:17:25.553Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37826 http://www.exploit-db.com/exploits/10519 http://www.vupen.com/english/advisories/2009/3608 http://www.securityfocus.com/bid/37394 http://osvdb.org/61231	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6843`	vulnerable	2026-06-08 04:51:04.935064	Details available Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter. Published: 2009-07-02T10:00:00.000Z Updated: 2024-08-07T11:42:00.327Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/46991 http://www.securityfocus.com/archive/1/498814/100/0/threaded http://www.securityfocus.com/bid/32578	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2071`	vulnerable	2026-06-08 04:50:22.832975	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors. Published: 2008-05-12T16:00:00.000Z Updated: 2024-08-07T08:49:57.579Z Open on db.gcve.eu Reference links http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2 http://www.securityfocus.com/archive/1/491864/100/0/threaded http://www.vupen.com/english/advisories/2008/1522/references http://securityreason.com/securityalert/3866 http://lists.grok.org.uk/pipermail/full-disclosure/2008-May/062197.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2070`	vulnerable	2026-06-08 04:50:22.830361	Details available The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inject arbitrary script or HTML via repeated, improperly-ordered "<" and ">" characters in the (1) issue parameter to scripts2/knowlegebase, (2) user parameter to scripts2/changeip, (3) search parameter to scripts2/listaccts, and other unspecified vectors. Published: 2008-05-12T16:00:00.000Z Updated: 2024-08-07T08:49:57.763Z Open on db.gcve.eu Reference links http://changelog.cpanel.net/?revision=0%3Btree=%3Btreeview=%3Bshow=html%3Bpp=25%3Bte=1314%3Bpg=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/42305 http://www.securityfocus.com/archive/1/491864/100/0/threaded http://www.vupen.com/english/advisories/2008/1522/references http://securityreason.com/securityalert/3866	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.