CVE-2016-10808

HIGH

cPanel 11.50.0.4-11.50.6.2 - Improper Input Validation in /scripts/addpop and /scripts/delpop

Title source: llm

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).

Core 1

Core References

Release Notes, Vendor Advisory x_refsource_confirm

CVSS v3 8.8

EPSS 0.0059

EPSS Percentile 69.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-20

Status published

Products (1)

cpanel/cpanel 11.50.0.4 - 11.50.6.2

Published Aug 07, 2019

Tracked Since Feb 18, 2026