CVE-2006-5883

Published: Nov 14, 2006Modified: Apr 23, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.

Affected (1)

Products: Cpanel: Cpanel

Cpanel

1 product

Cpanel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cpanel Cpanel	Version 10

References (16)

http://aria-security.net/advisory/cpanel.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/22825

Source: cve@mitre.org

http://securityreason.com/securityalert/1847

Source: cve@mitre.org

http://www.osvdb.org/30386

Source: cve@mitre.org

http://www.osvdb.org/30387

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451374/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21027

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/4500

Source: cve@mitre.org

http://aria-security.net/advisory/cpanel.txt