Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

cPanel has the security reputation of pre-3.0 Wordpress. It's a real-world, actual problem; in a shared hosting environment, cPanel adds a lot of risk for your customers.

Here's a list of CVEs for cPanel from 2010 back: http://www.cvedetails.com/vulnerability-list/vendor_id-1766/...

andalso: http://www.exploit-db.com/search/?action=search&filter_page=...

I dunno why those lists both stop at around 2010. cPanel is still being actively compromised: http://www.webhostingtalk.com/showthread.php?t=1267400

There's a fair chance that cPanel is the hole that regularly gives heartburn to some providers, like GoDaddy. For example, http://blog.sucuri.net/2011/09/godaddy-shared-servers-compro...

cPanel is popular, and it solves a lot of problems for a lot of people. Because it's so common, people who don't otherwise know their way around web hosting can feel right at home when using cPanel. I don't have some kind of irrational, hipster-esque or elitist hatred for it; I simply think that I can't in good conscience install it and knowingly put my hosting customers at risk.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: