fkie_cve-2017-11441
Vulnerability from fkie_nvd
Published
2017-07-19 07:29
Modified
2024-11-21 03:07
Severity ?
5.4 (Medium) - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Summary
The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
References
cve@mitre.orghttps://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/Vendor Advisory
Impacted products
Vendor Product Version
cpanel whm *
cpanel whm 58.0.3
cpanel whm 58.0.4
cpanel whm 58.0.5
cpanel whm 58.0.6
cpanel whm 58.0.7
cpanel whm 58.0.8
cpanel whm 58.0.11
cpanel whm 58.0.12
cpanel whm 58.0.13
cpanel whm 58.0.17
cpanel whm 58.0.19
cpanel whm 58.0.20
cpanel whm 58.0.23
cpanel whm 58.0.24
cpanel whm 58.0.25
cpanel whm 58.0.26
cpanel whm 58.0.27
cpanel whm 58.0.28
cpanel whm 58.0.29
cpanel whm 58.0.30
cpanel whm 58.0.31
cpanel whm 58.0.32
cpanel whm 58.0.34
cpanel whm 58.0.36
cpanel whm 58.0.37
cpanel whm 58.0.41
cpanel whm 58.0.43
cpanel whm 58.0.44
cpanel whm 58.0.45
cpanel whm 58.0.46
cpanel whm 58.0.47
cpanel whm 58.0.48
cpanel whm 58.0.49
cpanel whm 58.0.50
cpanel whm 58.0.51
cpanel whm 60.0.3
cpanel whm 60.0.4
cpanel whm 60.0.5
cpanel whm 60.0.6
cpanel whm 60.0.8
cpanel whm 60.0.9
cpanel whm 60.0.10
cpanel whm 60.0.11
cpanel whm 60.0.12
cpanel whm 60.0.13
cpanel whm 60.0.14
cpanel whm 60.0.15
cpanel whm 60.0.17
cpanel whm 60.0.18
cpanel whm 60.0.19
cpanel whm 60.0.22
cpanel whm 60.0.24
cpanel whm 60.0.25
cpanel whm 60.0.26
cpanel whm 60.0.27
cpanel whm 60.0.28
cpanel whm 60.0.31
cpanel whm 60.0.32
cpanel whm 60.0.34
cpanel whm 60.0.35
cpanel whm 60.0.36
cpanel whm 60.0.37
cpanel whm 60.0.38
cpanel whm 60.0.39
cpanel whm 60.0.42
cpanel whm 60.0.43
cpanel whm 60.0.44
cpanel whm 62.0.1
cpanel whm 62.0.2
cpanel whm 62.0.4
cpanel whm 62.0.5
cpanel whm 62.0.6
cpanel whm 62.0.7
cpanel whm 62.0.8
cpanel whm 62.0.9
cpanel whm 62.0.10
cpanel whm 62.0.11
cpanel whm 62.0.12
cpanel whm 62.0.14
cpanel whm 62.0.15
cpanel whm 62.0.16
cpanel whm 62.0.17
cpanel whm 62.0.19
cpanel whm 62.0.20
cpanel whm 62.0.23
cpanel whm 62.0.24
cpanel whm 62.0.26
cpanel whm 64.0.0
cpanel whm 64.0.1
cpanel whm 64.0.2
cpanel whm 64.0.3
cpanel whm 64.0.4
cpanel whm 64.0.7
cpanel whm 64.0.9
cpanel whm 64.0.11
cpanel whm 64.0.12
cpanel whm 64.0.13
cpanel whm 64.0.14
cpanel whm 64.0.15
cpanel whm 64.0.17
cpanel whm 64.0.18
cpanel whm 64.0.19
cpanel whm 64.0.20
cpanel whm 64.0.21
cpanel whm 64.0.22
cpanel whm 64.0.24
cpanel whm 64.0.27
cpanel whm 64.0.28
cpanel whm 64.0.29
cpanel whm 64.0.30
cpanel whm 64.0.31
cpanel whm 64.0.32
cpanel whm 66.0.1


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD777F77-FEF1-4FC4-BDB2-FA2BAA6EDFA8",
              "versionEndIncluding": "56.0.50",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F028D92-3C84-4FE4-AAF5-328FEC5D0D89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "897810CF-3BC7-4887-B071-09FB65BD083A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "68CB639A-E60D-4D85-8618-370417571607",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "98C4B94D-7D02-43B7-B85C-8E2E8D4EEE70",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB435131-49F8-459A-BDBE-525499DDED2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCF830BB-5C9A-4AB4-8747-0B86EFB01742",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "9888697E-CC9E-4AE4-B574-EE048CFCC170",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "415FF9CE-35AD-405F-8ED4-226F885A2518",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E2D7F2D-5DD5-41C4-BD70-58A65C35B0DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5AFC390-8866-482C-B66D-64B75BE99F01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "19773D25-BAAB-4700-A442-74C40C49590B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "A60F6226-DDC1-4CE2-9480-432330818260",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AD26C46-E1EE-4F8D-A8BC-25CC0E900845",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1664B4D-3315-4762-992F-2588B809A636",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "499671F3-552B-4C6B-898B-DEF0CC57C972",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E5EFA69-203B-4294-B46A-C73752491877",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "15CCCF02-50E9-4B6E-BB4B-CDA62E226E44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "F75CAE9E-39E3-4897-92B3-497446C24BD4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3286FD4-AD8C-4E83-B8B9-E4F493BD2234",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "267C1DB8-9B00-42B0-817E-FE0BC858E22C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F6FCE08-A701-44B0-9F1A-A3E3BAC93E85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.32:*:*:*:*:*:*:*",
              "matchCriteriaId": "C97B2F37-8C20-41C9-BE64-458A0AB8E6CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.34:*:*:*:*:*:*:*",
              "matchCriteriaId": "40CAD8E8-B92A-4C08-BD4E-3F1A02030BBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.36:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D8AAAE7-00D9-4EDE-A14A-F20E00752C7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.37:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9568FD6-3D95-4A16-AAD3-5F5DCB7C6B6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.41:*:*:*:*:*:*:*",
              "matchCriteriaId": "85D7EE7C-9BEC-4957-A490-B96FE278B17B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.43:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4D56B8C-4E8D-476A-BAEA-6517B3C562C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.44:*:*:*:*:*:*:*",
              "matchCriteriaId": "E33B8944-8D93-4C12-8DA8-7CF106F8B73E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.45:*:*:*:*:*:*:*",
              "matchCriteriaId": "99E9BF23-1C5A-400D-9914-7BDEFF420552",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.46:*:*:*:*:*:*:*",
              "matchCriteriaId": "90398E79-AA78-4A66-AEA4-422C2EE7616C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.47:*:*:*:*:*:*:*",
              "matchCriteriaId": "D151D482-5CE7-4C5D-90E7-55C43371F58F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.48:*:*:*:*:*:*:*",
              "matchCriteriaId": "54390258-F8A8-4CFE-8AD5-97855459809A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.49:*:*:*:*:*:*:*",
              "matchCriteriaId": "3073AFD6-7009-49F8-8CC9-559CB2C141B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.50:*:*:*:*:*:*:*",
              "matchCriteriaId": "90317F2F-4610-4B09-8969-BC3D86C6FFB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:58.0.51:*:*:*:*:*:*:*",
              "matchCriteriaId": "C24EDFDC-3F25-4E3F-B9BC-A9FDE2EE6CE3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E21E570-C2EB-4FFE-85C4-C713963C64EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "704DE57D-B2C7-4727-9680-79A8CCF13FB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FC3C139-8A52-43C4-9FC9-F28157E389A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2330529-D41E-44EB-92D0-B395F7D51917",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC8DF0CB-6F96-465C-96CB-A3CD44DC4C52",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB5623E6-B6F1-4E52-984B-837988D2CB4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC225EE6-68CB-4178-AD65-3DF0FE05560F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3F43E06-AF7E-4014-93C2-72D0439448A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "F68C7B25-8E17-4864-BE4F-76878F597DB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "5ABEA0FE-A5F8-4757-83BC-593E6B7DD416",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2412C3E-77F8-4878-AA5F-B3BA0964C2B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1A6C727-81AE-42BF-B304-C013566A0C05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E2BFF0C-9938-47BD-A326-2F59FF378840",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C283BB9-8119-4196-B5E6-13EFF746DAF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "E853D84D-6151-4E3E-BC59-B3547B060E7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "67B2D4F0-C24A-4343-A11E-33D992BAFDEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "D313A9FB-3F2F-4B6E-9F7D-252CB9AB8ADF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9FE9AD2-3904-4B46-B678-704F4EFFFCEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "91D86369-7ABE-4B73-B286-64F57CC65E24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFA7C360-5542-494D-B0CC-C52E34A26F2D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "A662B4A1-2DFC-4F4D-BE29-B16158A60C09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A2BB95D-3A28-4FA7-9246-4CA0AD1D590E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.32:*:*:*:*:*:*:*",
              "matchCriteriaId": "C29F29FA-2DED-413A-AF3E-AE4AE8C9A7B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.34:*:*:*:*:*:*:*",
              "matchCriteriaId": "110F953F-25D8-44C2-823F-30067C61C379",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.35:*:*:*:*:*:*:*",
              "matchCriteriaId": "294B30D8-E12F-47CF-B2DA-AC7577FD4B83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.36:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D1BC575-9427-4125-AA54-616FAE6D0BF7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.37:*:*:*:*:*:*:*",
              "matchCriteriaId": "93DBCBE1-EB6F-4876-A956-C12FB0EAED61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.38:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5D61027-EB99-415F-9F10-B6F9FFC87D7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.39:*:*:*:*:*:*:*",
              "matchCriteriaId": "86AF6A6B-9AAF-4F74-8A98-48D5F34E6C30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.42:*:*:*:*:*:*:*",
              "matchCriteriaId": "B6A3BD47-3220-484C-B1A8-C3DC8A46306A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.43:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DD04020-BDD4-4572-8C83-48956C936E6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:60.0.44:*:*:*:*:*:*:*",
              "matchCriteriaId": "731A22C9-0426-48EE-92EF-2440ECA1F022",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "88079D27-72A3-421F-AF06-A4E136E36970",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "675E8818-C8C2-42FC-9E1E-C3425B4F45B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1ECD9CB6-EF15-41CE-9776-DDB3214F7BC6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0926FA9-8AC7-49EC-A8A1-62DF897B3E2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F03BA70-00E4-431D-BA94-434A629CA864",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7B614E2-088F-4D56-9D2B-E88EF4F324E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A220E99-3047-4076-9911-141F657846B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "410891E7-16EE-4484-9B8A-3F846D97E814",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "977FF9E0-97B8-4648-AB81-BEB873A8484E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C5C8D92-EE52-4968-8784-9DF10A56C665",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "204899BD-2207-4F04-ABDA-DE9C99BF46E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C0E6E2B-28A9-4F6D-B2DB-D7883755F4B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6E2C75A-498B-4307-B037-E40FF971A615",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB376BFE-CA59-4234-A8DB-224EE8EB2322",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5FFE31B-F76E-4C03-9789-8B57EEFDB57E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC03CC16-AB92-474A-A822-8333B14B9759",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "988AB53E-986F-4354-AD3E-A624BF153EDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABAC8D69-85E5-43F0-8961-C463347146D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "398C63A9-FA1B-493C-AFDA-EF7BFF9976E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:62.0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9636950-0115-4BE3-BDE3-70E5BA8FB444",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "668787FC-7EC5-4C18-8CB7-52B0D6096A2D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "796793D1-EC44-4B08-84EE-55E1ED33D3EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C552D9B8-4636-4FBC-A9A7-F35066755F04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "34B946FC-1297-4B93-8CA2-2766DB6B92C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3A37691-C7D5-4D1B-B3C7-0A1856A97855",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "49FEE551-A861-4F37-9600-9EDB428B6553",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EC0F847-68D4-49D7-A46E-AB567FE45A68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F9C2290-6C36-4096-AF00-04CCEAE97680",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "08F2C36E-DCD3-4233-A79B-49975B1ACFBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1F844EA-873F-4002-9641-45E87778A514",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "047F230D-CE98-455C-A2AA-0913AA85CA66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "8863BD0A-F3AB-40A8-A691-C7E3B7398544",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F3E2FCD-7A8B-4E69-8838-A8C7472359A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "54B81B71-F25D-4030-8BD8-FD95BAA4F015",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7311E32-D6A3-4631-BCC2-FA1583521883",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCB25FB9-16C1-4242-A662-FD2FE540FF2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "D851B7C1-0376-4E3A-BB49-48C3CB56A1A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "38C95DA9-BE14-4668-B7C4-ABE2BD9E2214",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4EE0B2C-BE85-4303-8A8C-14CEA2BA018B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "03CF5EB8-AFBA-49F5-8CCB-40155D056D69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F3335D4-723F-4755-AAEA-76CB3B34DC8D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E037D4A-F267-448C-82EF-6A7984B6D33A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "3034A0D0-05E3-46CF-B77C-4168DB4882B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "01032A77-602A-4575-9D9D-02A8EC8B0F38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:whm:64.0.32:*:*:*:*:*:*:*",
              "matchCriteriaId": "74AB5065-5774-4EAA-8118-86403EAA1090",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:whm:66.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "45589384-10B4-4CE4-A08E-541F62213002",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297."
    },
    {
      "lang": "es",
      "value": "La interfaz de WHM Upload Locale en cPanel anterior a versi\u00f3n 56.0.51, versi\u00f3n 58.x anterior a 58.0.52, versi\u00f3n 60.x anterior a 60.0.45, versi\u00f3n 62.x anterior a 62.0.27, versi\u00f3n 64.x anterior a 64.0.33, y versi\u00f3n 66.x anterior a 66.0.2, presenta un problema de tipo XSS por medio de un nombre de archivo locale, tambi\u00e9n se conoce como como SEC-297."
    }
  ],
  "id": "CVE-2017-11441",
  "lastModified": "2024-11-21T03:07:47.747",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "NONE",
          "baseScore": 3.5,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 6.8,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-07-19T07:29:00.360",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.