Lucene search
MitreCVE-2006-5535HistoryOct 26, 2006 - 5:07 p.m.
CVE-2006-5535
2006-10-2617:07:00
mitre
web.nvd.nist.gov
27
cve-2006-5535
cross-site scripting
xss vulnerabilities
webhostmanager
whm
cpanel
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.007
Percentile
80.6%
Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate.
Affected configurations
Node
cpanelcpanelMatch10.9.0_r50
Related
cvelist
cvelist
CVE-2006-5535
2006-10-26 17:00:00
exploitdb
exploitdb
cPanel 10.9 - 'dosetmytheme?theme' Cross-Site Scripting
2006-10-23 00:00:00
cPanel 10.9 - 'editzonetemplate?template' Cross-Site Scripting
2006-10-23 00:00:00
nvd
nvd
CVE-2006-5535
2006-10-26 17:07:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.007
Percentile
80.6%
Related for CVE-2006-5535