NetSight
medium5.5

CVE-2018-20924

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).

Impact

cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.42
from 67.9999.64 before 68.0.33
from 69.9999.122 before 70.0.23

Weakness classification

References