NetSight
medium6.5

CVE-2016-10815

cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120).

Impact

cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120).

Affected products

VendorProductAffected versions
CpanelCpanel
from 11.50.0.4 before 11.50.6.2
from 11.52.6.0 before 11.52.6.1
from 11.54.0.0 before 11.54.0.24
from 11.56.0.1 before 56.0.15

Weakness classification

References