Back to search
CVE-2006-1407
Published: Mar 28, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
ADV-2006-1093
vdb-entry
x_refsource_VUPEN
24125
vdb-entry
x_refsource_OSVDB
24126
vdb-entry
x_refsource_OSVDB
19375
third-party-advisory
x_refsource_SECUNIA
17263
vdb-entry
x_refsource_BID
helm-domainsusersdefaault-xss(30309)
vdb-entry
x_refsource_XF
helm-domainsdefault-xss(25470)
vdb-entry
x_refsource_XF
20060327 Helm Control Panel followup
mailing-list
x_refsource_VIM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now