NetSight
high8.8

CVE-2016-10850

cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).

Impact

cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).

Affected products

VendorProductAffected versions
CpanelCpanel
from 11.48.0.5 before 11.48.5.2
from 11.50.0.4 before 11.50.4.3
from 11.52.2.1 before 11.52.2.4
from 11.54.0.0 before 11.54.0.4

Weakness classification

References