|
Vulnerability Report: cPanel 10.x
|
This vulnerability report for cPanel 10.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.
If you have information about a new or an existing vulnerability in cPanel 10.x then you are more than welcome to contact us.
|
|
|
|
|
Vendor, Links, and Unpatched Vulnerabilities
| Vendor |
cPanel inc.
|
|
|
Product Link
|
View Here (Link to external site)
|
|
|
Affected By
|
18 Secunia advisories
43 Vulnerabilities
|
|
|
Monitor Product
|
Receive alerts for this product
|
|
|
Unpatched
|
17% (3 of 18 Secunia advisories)
|
|
Most Critical Unpatched
The most severe unpatched Secunia advisory affecting cPanel 10.x, with all vendor patches applied, is rated Less critical  .
|
|
|
|
|
|
18 Secunia Advisories in 2003-2009
|
Secunia has issued a total of 18 Secunia advisories in 2003-2009 for cPanel 10.x. Currently, 17% (3 out of 18) are marked as unpatched with the most severe being rated Less critical
More information about the specific Secunia advisories affecting cPanel 10.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.
|
|
|
|
|
|
Release Date:
2008-01-18 |
Secunia Advisory ID:
SA28561 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Aria-Security Team have reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2007-07-27 |
Secunia Advisory ID:
SA26191 |
Solution Status:
Unpatched |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Aria-Security Team have reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2007-06-22 |
Secunia Advisory ID:
SA25722 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
Exposure of system information
|
Where:
From remote |
|
Short Description:
agentsteal has reported a vulnerability and a weakness in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks or to disclose system information. [Read More]
|
|
|
|
|
|
Release Date:
2007-02-13 |
Secunia Advisory ID:
SA24106 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
s3rv3r_hack3r has reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2007-02-09 |
Secunia Advisory ID:
SA24097 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
A vulnerability has been reported in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-12-11 |
Secunia Advisory ID:
SA23302 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Aria-Security Team has reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-12-05 |
Secunia Advisory ID:
SA23116 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Aria-Security has reported some vulnerabilities in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-11-22 |
Secunia Advisory ID:
SA22984 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Aria-Security has reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-11-14 |
Secunia Advisory ID:
SA22825 |
Solution Status:
Partial Fix |
|
Criticality:
|
Impact:
Hijacking
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Aria-Security has reported some vulnerabilities in cPanel, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting and cross-site request forgery attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-10-25 |
Secunia Advisory ID:
SA22555 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Crackers_Child has reported some vulnerabilities in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-09-25 |
Secunia Advisory ID:
SA22072 |
Solution Status:
Vendor Patch |
|
Criticality:
 |
Impact:
Privilege escalation
|
Where:
From remote |
|
Short Description:
A vulnerability has been reported in cPanel, which can be exploited by malicious users to gain escalated privileges. [Read More]
|
|
|
|
|
|
Release Date:
2006-08-21 |
Secunia Advisory ID:
SA21592 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Preth00nker has reported some vulnerabilities in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-06-27 |
Secunia Advisory ID:
SA20840 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Preth00nker has reported a vulnerability in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-02-06 |
Secunia Advisory ID:
SA18695 |
Solution Status:
Unpatched |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Some vulnerabilities have been reported in cPanel, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2006-02-03 |
Secunia Advisory ID:
SA18691 |
Solution Status:
Unpatched |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
$um$id has reported two vulnerabilities in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
|
|
|
Release Date:
2005-11-04 |
Secunia Advisory ID:
SA16609 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
Secunia Research has discovered a vulnerability in cPanel, which can be exploited by malicious people to conduct script insertion attacks. [Read More]
|
|
|
|
|
|
Release Date:
2005-08-10 |
Secunia Advisory ID:
SA16362 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Privilege escalation
|
Where:
From remote |
|
Short Description:
IHS has discovered a security issue in cPanel, which may allow malicious users to gain escalated privileges. [Read More]
|
|
|
|
|
|
Release Date:
2005-06-22 |
Secunia Advisory ID:
SA15770 |
Solution Status:
Vendor Patch |
|
Criticality:
|
Impact:
Cross Site Scripting
|
Where:
From remote |
|
Short Description:
A vulnerability has been discovered in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]
|
|
|
