SecurityThe Hacker Newsabout 1 hour ago
cPanel Flaw Lets Hosting Accounts Run Root Code
3 min read
cPanel disclosed on September 22 that a flaw in its CalDAV and CardDAV service lets any hosting account holder run code as root and take full server control. A second bug in the WP Toolkit plugin lets users modify other accounts' databases. Fixed versions are available, but cPanel offers no workaround for unpatched servers.
Level
Hype check
Tap to vote and see what everyone thinks.
