Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: cPanel 11.x
This vulnerability report for cPanel 11.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in cPanel 11.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor cPanel inc.

Product Link View Here (Link to external site)

Affected By 8 Secunia advisories
15 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 0% (0 of 8 Secunia advisories)

Most Critical Unpatched
There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..




8 Secunia Advisories in 2003-2009
Secunia has issued a total of 8 Secunia advisories in 2003-2009 for cPanel 11.x. Currently, 0% (0 out of 8) are marked as unpatched.

More information about the specific Secunia advisories affecting cPanel 11.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



cPanel "fileop" Cross-Site Scripting Vulnerability
Vendor Workaround. Secunia Advisory 1 of 3 in 2009. 82 views.
Release Date:
2009-12-21
Secunia Advisory ID:
SA37826
Solution Status:
Vendor Workaround
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
A vulnerability has been reported in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


cPanel File Manager Script Insertion Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 3 in 2009. 676 views.
Release Date:
2009-03-25
Secunia Advisory ID:
SA34342
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Some vulnerabilities have been reported in cPanel, which can be exploited by malicious users to conduct script insertion attacks. [Read More]


cPanel Script Insertion and Cross-Site Scripting Vulnerabilities
Vendor Workaround. Secunia Advisory 3 of 3 in 2009. 2,032 views.
Release Date:
2009-02-20
Secunia Advisory ID:
SA33990
Solution Status:
Vendor Workaround
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
mckt has reported some vulnerabilities in cPanel, which can be exploited by malicious, local users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. [Read More]


cPanel Cross-Site Scripting and Request Forgery Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 3 in 2008. 2,691 views.
Release Date:
2008-05-13
Secunia Advisory ID:
SA30166
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Matteo Carli has reported some vulnerabilities in cPanel, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks. [Read More]


cPanel Cross-Site Request Forgery Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 3 in 2008. 7,566 views.
Release Date:
2008-05-01
Secunia Advisory ID:
SA30027
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Some vulnerabilities have been reported in cPanel, which can be exploited by malicious people to conduct cross-site request forgery attacks. [Read More]


cPanel Leech Protect "rurl" Cross-Site Scripting
Vendor Patch. Secunia Advisory 3 of 3 in 2008. 7,869 views.
Release Date:
2008-01-18
Secunia Advisory ID:
SA28561
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Aria-Security Team have reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


cPanel Simple CGI Wrapper Cross-Site Scripting and Path Disclosure
Vendor Patch. Secunia Advisory 1 of 1 in 2007. 8,367 views.
Release Date:
2007-06-22
Secunia Advisory ID:
SA25722
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Exposure of system information
Where:
From remote
Short Description:
agentsteal has reported a vulnerability and a weakness in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks or to disclose system information. [Read More]


cPanel "file" Parameter Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 1 of 1 in 2006. 8,899 views.
Release Date:
2006-06-27
Secunia Advisory ID:
SA20840
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Preth00nker has reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]