CVE-2006-0573

Опубликовано: 07 фев. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01067

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9cpx-2cx6-874v

github

почти 4 года назад