CVE-2006-5883

2006-11-1419:00:00

mitre

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.

References

aria-security.net/advisory/cpanel.txt

secunia.com/advisories/22825

securityreason.com/securityalert/1847

www.osvdb.org/30386

www.osvdb.org/30387

www.securityfocus.com/archive/1/451374/100/0/threaded

www.securityfocus.com/bid/21027

www.vupen.com/english/advisories/2006/4500