Approved changes feed: RSS · Atom
cpe:2.3:a:cpanel:cpanel:*:stable:*:*:*:*:*:*
part: a version: * update: stable
| Vendor | Cpanel (dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28) |
|---|---|
| Product | Cpanel (26341cf1-5984-59b7-b69e-a9a0ad62c538) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-2478 |
vulnerable | 2026-06-08 04:50:24.150175 |
Details available
scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box). NOTE: the vendor disputes this, stating "I'm unable to reproduce such an issue on multiple servers running different versions of cPanel.
Published: 2008-05-28T15:00:00.000Z
Updated: 2024-08-07T09:05:30.027Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.