Lucene search
HistoryAug 22, 2006 - 5:04 p.m.
CVE-2006-4293
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.006
Percentile
79.5%
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.
Affected configurations
Node
cpanelcpanelMatch10
Related
cve
cve
CVE-2006-4293
2006-08-22 17:04:00
exploitdb
exploitdb
cPanel 10.x - 'dohtaccess.html?dir' Cross-Site Scripting
2006-08-21 00:00:00
cPanel 10.x - 'showfile.html?File' Cross-Site Scripting
2006-08-21 00:00:00
cPanel 10.x - 'editit.html?File' Cross-Site Scripting
2006-08-21 00:00:00
cvelist
cvelist
CVE-2006-4293
2006-08-22 17:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.006
Percentile
79.5%
Related for NVD:CVE-2006-4293