CVE-2006-5983: XSS
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) user parameter to (a) CMDSHOWRESELLER or (b) CMDSHOWUSER in the Admin level; the (2) TYPE parameter to (c) CMDTICKETCREATE or (d) CMDTICKET, the (3) user parameter to (e) CMDEMAILFORWARDERMODIFY, (f) CMDEMAILVACATIONMODIFY, or (g) CMDFTPSHOW, and the (4) name parameter to (h) CMDEMAILLIST in the User level; or the (5) user parameter to (i) CMDSHOWUSER in the Reseller level.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5983?
CVE-2006-5983 is classified as a medium severity vulnerability due to its potential for cross-site scripting exploits.
How do I fix CVE-2006-5983?
To fix CVE-2006-5983, ensure you are using an updated version of DirectAdmin that addresses these XSS vulnerabilities.
Who is affected by CVE-2006-5983?
CVE-2006-5983 affects remote authenticated users of JBMC Software DirectAdmin version 1.28.1.
What types of attacks are possible with CVE-2006-5983?
CVE-2006-5983 can lead to cross-site scripting (XSS) attacks where attackers can inject arbitrary web scripts or HTML.
Can CVE-2006-5983 be exploited without authentication?
No, CVE-2006-5983 requires authentication, as it only affects authenticated users of the DirectAdmin software.