2 ms·
cPanel has the security reputation of pre-3.0 Wordpress. It's a real-world, actual problem; in a shared hosting environment, cPanel adds a lot of risk for your
by thaumaturgy 13y ago
cPanel has the security reputation of pre-3.0 Wordpress. It's a real-world, actual problem; in a shared hosting environment, cPanel adds a lot of risk for your customers.
Here's a list of CVEs for cPanel from 2010 back: http://www.cvedetails.com/vulnerability-list/vendor_id-1766/Cpanel.html http://www.cvedetails.com/vulnerability-list/vendor_id-1766/...
andalso: http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=cpanel&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve= http://www.exploit-db.com/search/?action=search&filter_page=...
I dunno why those lists both stop at around 2010. cPanel is still being actively compromised: http://www.webhostingtalk.com/showthread.php?t=1267400 http://www.webhostingtalk.com/showthread.php?t=1267400
There's a fair chance that cPanel is the hole that regularly gives heartburn to some providers, like GoDaddy. For example, http://blog.sucuri.net/2011/09/godaddy-shared-servers-compromised-htaccess-redirection-to-sokoloperkovuskeci-com.html http://blog.sucuri.net/2011/09/godaddy-shared-servers-compro...
cPanel is popular, and it solves a lot of problems for a lot of people. Because it's so common, people who don't otherwise know their way around web hosting can feel right at home when using cPanel. I don't have some kind of irrational, hipster-esque or elitist hatred for it; I simply think that I can't in good conscience install it and knowingly put my hosting customers at risk.