CVE-2006-5983

CVE-2006-5983 concerns DirectAdmin 1.28.1 with multiple reflected XSS vectors. The connected PTSecurity entry details that remote authenticated users can inject arbitrary script/HTML via a range of parameters and commands: user parameter to CMD SHOW RESELLER/SHOW USER (Admin level); TYPE paramete...

CVE-2006-5983: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 user parameter to a CMDSHOWRESELLER or b CMDSHOWUSER in the Admin level; the 2 TYPE parameter to c CMDTICKETCREATE or d CMDTICKET...