CVE-2016-10839

CVE Database · CVE-2016-10839

· N/AModified

CVSS v3.1

N/A

EPSS

1.10%

Published

Aug 1, 2019

Modified

Nov 20, 2024

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

cPanel before 11.54.0.4 allows SQL injection in bin/horde_update_usernames (SEC-71).

Weaknesses (CWE)

CWE-89

Affected Products (4)

cpanel · cpanel (up to 11.48.5.2)vulnerable

cpanel · cpanel (up to 11.50.4.3)vulnerable

cpanel · cpanel (up to 11.52.2.4)vulnerable

cpanel · cpanel (up to 11.54.0.4)vulnerable

References (2)

Release NotesVendor Advisory

Release NotesVendor Advisory