CVEvulnerability

CVE-2017-11441

5.4 MEDIUM Published 2017-07-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.

Affected configurations

• cpanel whm (<= 56.0.50) • cpanel whm 58.0.3 • cpanel whm 58.0.4 • cpanel whm 58.0.5 • cpanel whm 58.0.6 • cpanel whm 58.0.7 • cpanel whm 58.0.8 • cpanel whm 58.0.11 • cpanel whm 58.0.12 • cpanel whm 58.0.13 • cpanel whm 58.0.17 • cpanel whm 58.0.19 • cpanel whm 58.0.20 • cpanel whm 58.0.23 • cpanel whm 58.0.24 • cpanel whm 58.0.25 • cpanel whm 58.0.26 • cpanel whm 58.0.27 • cpanel whm 58.0.28 • cpanel whm 58.0.29 • cpanel whm 58.0.30 • cpanel whm 58.0.31 • cpanel whm 58.0.32 • cpanel whm 58.0.34 • cpanel whm 58.0.36 • cpanel whm 58.0.37 • cpanel whm 58.0.41 • cpanel whm 58.0.43 • cpanel whm 58.0.44 • cpanel whm 58.0.45 • cpanel whm 58.0.46 • cpanel whm 58.0.47 • cpanel whm 58.0.48 • cpanel whm 58.0.49 • cpanel whm 58.0.50 • cpanel whm 58.0.51 • cpanel whm 60.0.3 • cpanel whm 60.0.4 • cpanel whm 60.0.5 • cpanel whm 60.0.6 • cpanel whm 60.0.8 • cpanel whm 60.0.9 • cpanel whm 60.0.10 • cpanel whm 60.0.11 • cpanel whm 60.0.12 • cpanel whm 60.0.13 • cpanel whm 60.0.14 • cpanel whm 60.0.15 • cpanel whm 60.0.17 • cpanel whm 60.0.18 • cpanel whm 60.0.19 • cpanel whm 60.0.22 • cpanel whm 60.0.24 • cpanel whm 60.0.25 • cpanel whm 60.0.26 • cpanel whm 60.0.27 • cpanel whm 60.0.28 • cpanel whm 60.0.31 • cpanel whm 60.0.32 • cpanel whm 60.0.34 … and 54 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References