New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full… | HappeningNow.news

Cybersecurity

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22.

Source Summary Published 1h 26m ago Brief Under 1 min brief
Story intelligence
Coverage Single outlet Single-outlet story
Views New Be the first to read
Brief read Under 1 min brief 59 words

Summary

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22. A second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts.

Read original at The Hackernews

More from Cybersecurity

Continue reading recent Cybersecurity coverage

Support HappeningNow

Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.

Support HappeningNow

Report an issue with this page