CVE-2006-5883

Multiple cross-site scripting XSS vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the 1 dir parameter in a seldir.html, and the 2 user and 3 dir parameters in b newuser.html...