CVE-2016-10800
HIGHcPanel 55.9999.61-56.0.27 - Unauthenticated Demo-Mode Escape via Site Templates and Boxtrapper API
Title source: llmDescription
cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).
References (1)
Core 1
Core References
Release Notes, Vendor Advisory x_refsource_confirm
https://documentation.cpanel.net/display/CL/58+Change+Log
Scores
CVSS v3
7.8
EPSS
0.0026
EPSS Percentile
48.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (1)
cpanel/cpanel
55.9999.61 - 56.0.27
Published
Aug 07, 2019
Tracked Since
Feb 18, 2026