6.8

CVE-2006-5984

EPSS 1.72%
Veröffentlicht 20.11.2006 21:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) txtCompanyName, (2) txtEmail, or (3) txtUserAccNum parameter to (a) users.asp, or the (4) setThemeColour parameter to (b) default.asp in the Reseller and Admin levels; or the (5) setThemeColour parameter to default.asp in the User level.  NOTE: the txtDomainName parameter to domains.asp is covered by CVE-2006-1407, which suggests that this vector is fixed in 3.2.10 stable.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Webhost Automation ≫ Helm Web Hosting Control Panel Version3.2.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.72%	0.819

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

https://exchange.xforce.ibmcloud.com/vulnerabilities/30309

http://aria-security.net/advisory/helm.txt

Vendor Advisory

http://secunia.com/advisories/22916

Vendor Advisory

http://securityreason.com/securityalert/1884

http://securitytracker.com/id?1017240

http://www.securityfocus.com/archive/1/451737/100/0/threaded

http://www.securityfocus.com/archive/1/451848/100/200/threaded

http://www.vupen.com/english/advisories/2006/4557

https://nvd.nist.gov/vuln/detail/CVE-2006-5984

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5984

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5984

EUVD