Vulnerabilities > Cpanel > Cpanel > 10

DATE CVE VULNERABILITY TITLE RISK
2006-11-14 CVE-2006-5883 Cross-Site Scripting vulnerability in Cpanel 10
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.
network
cpanel
3.5
2006-08-22 CVE-2006-4293 Cross-Site Scripting vulnerability in Cpanel 10
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.
network
cpanel
4.3
2006-02-07 CVE-2006-0574 Cross-Site Scripting vulnerability in Cpanel 10
Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the (1) file extension or (2) mime-type.
network
cpanel
4.3
2006-02-07 CVE-2006-0573 Cross-Site Scripting vulnerability in cPanel
Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html.
network
cpanel
4.3