cPanel vulnerabilities
6 known vulnerabilities in cPanel from WebPros. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
cPanel: Improper Neutralization of Special Elements used in an SQL Command
Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled.
- 8.3 High severity
cPanel: Improper Neutralization of CRLF Sequences
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response.
- 8.2 High severity
cPanel: Improper Certificate Validation
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
- 8.6 High severity
cPanel: Execution with Unnecessary Privileges
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
- 8.6 High severity
cPanel: Relative Path Traversal
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.
- 9.8 Critical severity
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Exploited
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.