CVE-2006-5535: XSS
Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5535?
CVE-2006-5535 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2006-5535?
To fix CVE-2006-5535, you should update to a patched version of cPanel or WebHostManager that addresses the XSS vulnerabilities.
What systems are affected by CVE-2006-5535?
CVE-2006-5535 affects WebHostManager versions 10.8.0 and cPanel version 10.9.0 R50.
What are the risks of CVE-2006-5535?
The risks of CVE-2006-5535 include potential unauthorized access to user sessions and the ability to execute arbitrary scripts in the context of a user's browser.
Who is impacted by CVE-2006-5535?
Web hosting providers and users utilizing affected versions of cPanel and WebHostManager are impacted by CVE-2006-5535.