CVE Database
/

CVE-2006-5535

Back to search

CVE-2006-5535

Published: Oct 26, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate.

VendorProductVersions

n/a

n/a

affected
n/a

References

20683
vdb-entry
x_refsource_BID
1780
third-party-advisory
x_refsource_SREASON
22555
third-party-advisory
x_refsource_SECUNIA
ADV-2006-4190
vdb-entry
x_refsource_VUPEN
http://changelog.cpanel.net/
x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now