CVE-2007-0890

Published: Feb 12, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.

Affected (24)

Products: Cpanel: Webhost Manager

Cpanel

1 product

Webhost Manager

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Cpanel Webhost Manager	Version 10.2.0_r82
Cpanel Webhost Manager	Version 10.6.0_r137
Cpanel Webhost Manager	Version 10.8.1_113
Cpanel Webhost Manager	Version 10.8.1_build84
Cpanel Webhost Manager	Version 10.8.2_118
Cpanel Webhost Manager	Version 10.9
Cpanel Webhost Manager	Version 11.0
Cpanel Webhost Manager	Version 11
Cpanel Webhost Manager	Version 11_beta
Cpanel Webhost Manager	Version 5.0
Cpanel Webhost Manager	Version 5.3
Cpanel Webhost Manager	Version 6.0
Cpanel Webhost Manager	Version 6.2
Cpanel Webhost Manager	Version 6.4.1
Cpanel Webhost Manager	Version 6.4.2
Cpanel Webhost Manager	Version 6.4.2_stable_48
Cpanel Webhost Manager	Version 6.4
Cpanel Webhost Manager	Version 7.0
Cpanel Webhost Manager	Version 8.0
Cpanel Webhost Manager	Version 9.0
Cpanel Webhost Manager	Version 9.1.0_r85
Cpanel Webhost Manager	Version 9.1
Cpanel Webhost Manager	Version 9.4.1_r64
Cpanel Webhost Manager	Version 9.9.1_r3