来源：cPanel官网
发布日期：2019-11-18
阅读次数：475
评论：0
更新详情
[security] Fixed case SEC-499: Authentication bypass due to variations in webmail username handling[security] Fixed case SEC-508: Account suspension bypass via virtual mail accounts.[security] Fixed case SEC-516: Authentication bypass due to faulty password file format parsing.[security] Fixed case SEC-520: Self-XSS due to faulty JSON string escaping.[security] Fixed case SEC-525: Cpanel::Rand::Get can produce predictable output.[security] Fixed case SEC-532: Root chown on arbitrary paths in cPanel log processing.[security] Fixed case SEC-533: Stored-XSS Vulnerability in WHM Backup Restoration[security] Fixed case SEC-534: WebDAV authentication bypass due to faulty connection sharing logic.
软件描述
cPanel 是一套在网页寄存业中最享负盛名的商业软件，是基于于 Linux 和 BSD 系统及以 PHP 开发且性质为闭源软件；提供了足够强大和相当完整的主机管理功能，诸如：Webmail 及多种电邮协议、网页化 FTP 管理、SSH 连线、数据库管理系统、DNS 管理等远端网页式主机管理软件功能。
评论