CVE-2020-10120

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545).

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Mar 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-101219.8cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC-546).CVE-2020-101226.5cPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547).CVE-2020-101235.3The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation reqCVE-2020-101247.1NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host CVE-2020-101257.6NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software CVE-2020-101267.6NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attackeCVE-2020-101285.4SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox pCVE-2020-101298.8SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.CVE-2020-10137.5<p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploiCVE-2020-101308.8SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the systCVE-2020-101319.8SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.CVE-2020-101326.1SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.
CVE-2020-10120: High severity, CVSS 7.2 | Vulnix