CVE-2006-5883

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-14 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.

Affected products

WebPros cPanel: 10

References

http://aria-security.net/advisory/cpanel.txt
http://secunia.com/advisories/22825
http://securityreason.com/securityalert/1847
http://www.osvdb.org/30386
http://www.osvdb.org/30387
http://www.securityfocus.com/archive/1/451374/100/0/threaded
http://www.securityfocus.com/bid/21027
http://www.vupen.com/english/advisories/2006/4500
http://aria-security.net/advisory/cpanel.txt
http://secunia.com/advisories/22825
http://securityreason.com/securityalert/1847
http://www.osvdb.org/30386

Get alerted when CVE-2006-5883 or the next vulnerability affects your stack