CVE-2019-14411

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473).

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 30, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-144123.3Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474).CVE-2019-144134.3cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476).CVE-2019-144143.3In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).CVE-2019-144154.8An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a CVE-2019-144167.2An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a maliciousCVE-2019-144177.2An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a maliciousCVE-2019-144188.8An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulCVE-2019-14425.5A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafCVE-2019-144228.8An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which coulCVE-2019-144238.8A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authCVE-2019-144246.5A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote autheCVE-2019-144276.1XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted J
CVE-2019-14411: Medium severity, CVSS 5.3 | Vulnix