{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-07-19T00:00:00", "descriptions": [{"lang": "en", "value": "The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T06:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-11441", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/", "refsource": "CONFIRM", "url": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T18:12:39.951Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-11441", "datePublished": "2017-07-19T07:00:00", "dateReserved": "2017-07-19T00:00:00", "dateUpdated": "2024-08-05T18:12:39.951Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD777F77-FEF1-4FC4-BDB2-FA2BAA6EDFA8", "versionEndIncluding": "56.0.50", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cpanel:whm:58.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "8F028D92-3C84-4FE4-AAF5-328FEC5D0D89", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "897810CF-3BC7-4887-B071-09FB65BD083A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "68CB639A-E60D-4D85-8618-370417571607", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "98C4B94D-7D02-43B7-B85C-8E2E8D4EEE70", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "DB435131-49F8-459A-BDBE-525499DDED2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "BCF830BB-5C9A-4AB4-8747-0B86EFB01742", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "9888697E-CC9E-4AE4-B574-EE048CFCC170", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "415FF9CE-35AD-405F-8ED4-226F885A2518", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "4E2D7F2D-5DD5-41C4-BD70-58A65C35B0DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "C5AFC390-8866-482C-B66D-64B75BE99F01", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "19773D25-BAAB-4700-A442-74C40C49590B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "A60F6226-DDC1-4CE2-9480-432330818260", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.23:*:*:*:*:*:*:*", "matchCriteriaId": "0AD26C46-E1EE-4F8D-A8BC-25CC0E900845", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "A1664B4D-3315-4762-992F-2588B809A636", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.25:*:*:*:*:*:*:*", "matchCriteriaId": "499671F3-552B-4C6B-898B-DEF0CC57C972", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.26:*:*:*:*:*:*:*", "matchCriteriaId": "0E5EFA69-203B-4294-B46A-C73752491877", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.27:*:*:*:*:*:*:*", "matchCriteriaId": "15CCCF02-50E9-4B6E-BB4B-CDA62E226E44", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.28:*:*:*:*:*:*:*", "matchCriteriaId": "F75CAE9E-39E3-4897-92B3-497446C24BD4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.29:*:*:*:*:*:*:*", "matchCriteriaId": "A3286FD4-AD8C-4E83-B8B9-E4F493BD2234", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.30:*:*:*:*:*:*:*", "matchCriteriaId": "267C1DB8-9B00-42B0-817E-FE0BC858E22C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.31:*:*:*:*:*:*:*", "matchCriteriaId": "2F6FCE08-A701-44B0-9F1A-A3E3BAC93E85", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.32:*:*:*:*:*:*:*", "matchCriteriaId": "C97B2F37-8C20-41C9-BE64-458A0AB8E6CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.34:*:*:*:*:*:*:*", "matchCriteriaId": "40CAD8E8-B92A-4C08-BD4E-3F1A02030BBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.36:*:*:*:*:*:*:*", "matchCriteriaId": "2D8AAAE7-00D9-4EDE-A14A-F20E00752C7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.37:*:*:*:*:*:*:*", "matchCriteriaId": "D9568FD6-3D95-4A16-AAD3-5F5DCB7C6B6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.41:*:*:*:*:*:*:*", "matchCriteriaId": "85D7EE7C-9BEC-4957-A490-B96FE278B17B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.43:*:*:*:*:*:*:*", "matchCriteriaId": "C4D56B8C-4E8D-476A-BAEA-6517B3C562C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.44:*:*:*:*:*:*:*", "matchCriteriaId": "E33B8944-8D93-4C12-8DA8-7CF106F8B73E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.45:*:*:*:*:*:*:*", "matchCriteriaId": "99E9BF23-1C5A-400D-9914-7BDEFF420552", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.46:*:*:*:*:*:*:*", "matchCriteriaId": "90398E79-AA78-4A66-AEA4-422C2EE7616C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.47:*:*:*:*:*:*:*", "matchCriteriaId": "D151D482-5CE7-4C5D-90E7-55C43371F58F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.48:*:*:*:*:*:*:*", "matchCriteriaId": "54390258-F8A8-4CFE-8AD5-97855459809A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.49:*:*:*:*:*:*:*", "matchCriteriaId": "3073AFD6-7009-49F8-8CC9-559CB2C141B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.50:*:*:*:*:*:*:*", "matchCriteriaId": "90317F2F-4610-4B09-8969-BC3D86C6FFB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:58.0.51:*:*:*:*:*:*:*", "matchCriteriaId": "C24EDFDC-3F25-4E3F-B9BC-A9FDE2EE6CE3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cpanel:whm:60.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "4E21E570-C2EB-4FFE-85C4-C713963C64EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "704DE57D-B2C7-4727-9680-79A8CCF13FB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "0FC3C139-8A52-43C4-9FC9-F28157E389A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "D2330529-D41E-44EB-92D0-B395F7D51917", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "AC8DF0CB-6F96-465C-96CB-A3CD44DC4C52", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "FB5623E6-B6F1-4E52-984B-837988D2CB4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "BC225EE6-68CB-4178-AD65-3DF0FE05560F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "E3F43E06-AF7E-4014-93C2-72D0439448A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "F68C7B25-8E17-4864-BE4F-76878F597DB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "5ABEA0FE-A5F8-4757-83BC-593E6B7DD416", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "D2412C3E-77F8-4878-AA5F-B3BA0964C2B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "D1A6C727-81AE-42BF-B304-C013566A0C05", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "4E2BFF0C-9938-47BD-A326-2F59FF378840", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "4C283BB9-8119-4196-B5E6-13EFF746DAF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "E853D84D-6151-4E3E-BC59-B3547B060E7F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "67B2D4F0-C24A-4343-A11E-33D992BAFDEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "D313A9FB-3F2F-4B6E-9F7D-252CB9AB8ADF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.25:*:*:*:*:*:*:*", "matchCriteriaId": "A9FE9AD2-3904-4B46-B678-704F4EFFFCEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.26:*:*:*:*:*:*:*", "matchCriteriaId": "91D86369-7ABE-4B73-B286-64F57CC65E24", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.27:*:*:*:*:*:*:*", "matchCriteriaId": "BFA7C360-5542-494D-B0CC-C52E34A26F2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.28:*:*:*:*:*:*:*", "matchCriteriaId": "A662B4A1-2DFC-4F4D-BE29-B16158A60C09", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.31:*:*:*:*:*:*:*", "matchCriteriaId": "4A2BB95D-3A28-4FA7-9246-4CA0AD1D590E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.32:*:*:*:*:*:*:*", "matchCriteriaId": "C29F29FA-2DED-413A-AF3E-AE4AE8C9A7B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.34:*:*:*:*:*:*:*", "matchCriteriaId": "110F953F-25D8-44C2-823F-30067C61C379", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.35:*:*:*:*:*:*:*", "matchCriteriaId": "294B30D8-E12F-47CF-B2DA-AC7577FD4B83", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.36:*:*:*:*:*:*:*", "matchCriteriaId": "2D1BC575-9427-4125-AA54-616FAE6D0BF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.37:*:*:*:*:*:*:*", "matchCriteriaId": "93DBCBE1-EB6F-4876-A956-C12FB0EAED61", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.38:*:*:*:*:*:*:*", "matchCriteriaId": "F5D61027-EB99-415F-9F10-B6F9FFC87D7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.39:*:*:*:*:*:*:*", "matchCriteriaId": "86AF6A6B-9AAF-4F74-8A98-48D5F34E6C30", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.42:*:*:*:*:*:*:*", "matchCriteriaId": "B6A3BD47-3220-484C-B1A8-C3DC8A46306A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.43:*:*:*:*:*:*:*", "matchCriteriaId": "4DD04020-BDD4-4572-8C83-48956C936E6C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:60.0.44:*:*:*:*:*:*:*", "matchCriteriaId": "731A22C9-0426-48EE-92EF-2440ECA1F022", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cpanel:whm:62.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "88079D27-72A3-421F-AF06-A4E136E36970", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "675E8818-C8C2-42FC-9E1E-C3425B4F45B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "1ECD9CB6-EF15-41CE-9776-DDB3214F7BC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "F0926FA9-8AC7-49EC-A8A1-62DF897B3E2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "2F03BA70-00E4-431D-BA94-434A629CA864", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "A7B614E2-088F-4D56-9D2B-E88EF4F324E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "7A220E99-3047-4076-9911-141F657846B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "410891E7-16EE-4484-9B8A-3F846D97E814", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "977FF9E0-97B8-4648-AB81-BEB873A8484E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "3C5C8D92-EE52-4968-8784-9DF10A56C665", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "204899BD-2207-4F04-ABDA-DE9C99BF46E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "7C0E6E2B-28A9-4F6D-B2DB-D7883755F4B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "E6E2C75A-498B-4307-B037-E40FF971A615", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "EB376BFE-CA59-4234-A8DB-224EE8EB2322", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "C5FFE31B-F76E-4C03-9789-8B57EEFDB57E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "CC03CC16-AB92-474A-A822-8333B14B9759", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "988AB53E-986F-4354-AD3E-A624BF153EDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.23:*:*:*:*:*:*:*", "matchCriteriaId": "ABAC8D69-85E5-43F0-8961-C463347146D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "398C63A9-FA1B-493C-AFDA-EF7BFF9976E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:62.0.26:*:*:*:*:*:*:*", "matchCriteriaId": "C9636950-0115-4BE3-BDE3-70E5BA8FB444", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cpanel:whm:64.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "668787FC-7EC5-4C18-8CB7-52B0D6096A2D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "796793D1-EC44-4B08-84EE-55E1ED33D3EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "C552D9B8-4636-4FBC-A9A7-F35066755F04", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "34B946FC-1297-4B93-8CA2-2766DB6B92C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "E3A37691-C7D5-4D1B-B3C7-0A1856A97855", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "49FEE551-A861-4F37-9600-9EDB428B6553", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "1EC0F847-68D4-49D7-A46E-AB567FE45A68", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "1F9C2290-6C36-4096-AF00-04CCEAE97680", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "08F2C36E-DCD3-4233-A79B-49975B1ACFBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "B1F844EA-873F-4002-9641-45E87778A514", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "047F230D-CE98-455C-A2AA-0913AA85CA66", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "8863BD0A-F3AB-40A8-A691-C7E3B7398544", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "9F3E2FCD-7A8B-4E69-8838-A8C7472359A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "54B81B71-F25D-4030-8BD8-FD95BAA4F015", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "C7311E32-D6A3-4631-BCC2-FA1583521883", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "BCB25FB9-16C1-4242-A662-FD2FE540FF2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.21:*:*:*:*:*:*:*", "matchCriteriaId": "D851B7C1-0376-4E3A-BB49-48C3CB56A1A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "38C95DA9-BE14-4668-B7C4-ABE2BD9E2214", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "E4EE0B2C-BE85-4303-8A8C-14CEA2BA018B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.27:*:*:*:*:*:*:*", "matchCriteriaId": "03CF5EB8-AFBA-49F5-8CCB-40155D056D69", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.28:*:*:*:*:*:*:*", "matchCriteriaId": "7F3335D4-723F-4755-AAEA-76CB3B34DC8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.29:*:*:*:*:*:*:*", "matchCriteriaId": "9E037D4A-F267-448C-82EF-6A7984B6D33A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.30:*:*:*:*:*:*:*", "matchCriteriaId": "3034A0D0-05E3-46CF-B77C-4168DB4882B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.31:*:*:*:*:*:*:*", "matchCriteriaId": "01032A77-602A-4575-9D9D-02A8EC8B0F38", "vulnerable": true}, {"criteria": "cpe:2.3:a:cpanel:whm:64.0.32:*:*:*:*:*:*:*", "matchCriteriaId": "74AB5065-5774-4EAA-8118-86403EAA1090", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cpanel:whm:66.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "45589384-10B4-4CE4-A08E-541F62213002", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297."}, {"lang": "es", "value": "La interfaz de WHM Upload Locale en cPanel anterior a versi\u00f3n 56.0.51, versi\u00f3n 58.x anterior a 58.0.52, versi\u00f3n 60.x anterior a 60.0.45, versi\u00f3n 62.x anterior a 62.0.27, versi\u00f3n 64.x anterior a 64.0.33, y versi\u00f3n 66.x anterior a 66.0.2, presenta un problema de tipo XSS por medio de un nombre de archivo locale, tambi\u00e9n se conoce como como SEC-297."}], "id": "CVE-2017-11441", "lastModified": "2017-08-15T19:43:41.760", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-07-19T07:29:00.360", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}