GCVE - cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*

part: a version: 10 update: *

Vendor	Cpanel (`dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28`)
Product	Cpanel (`26341cf1-5984-59b7-b69e-a9a0ad62c538`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5883`	vulnerable	2026-06-08 04:49:21.592709	Details available Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html. Published: 2006-11-14T19:00:00.000Z Updated: 2024-08-07T20:04:55.760Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/451374/100/0/threaded http://www.osvdb.org/30387 http://www.vupen.com/english/advisories/2006/4500 http://aria-security.net/advisory/cpanel.txt http://www.osvdb.org/30386	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4293`	vulnerable	2026-06-08 04:49:17.491613	Details available Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html. Published: 2006-08-22T17:00:00.000Z Updated: 2024-08-07T19:06:06.506Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/28447 http://www.osvdb.org/28043 http://www.securityfocus.com/bid/19624 http://secunia.com/advisories/21592 http://www.securityfocus.com/archive/1/443637/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0574`	vulnerable	2026-06-08 04:48:54.541834	Details available Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the (1) file extension or (2) mime-type. Published: 2006-02-07T18:00:00.000Z Updated: 2024-08-07T16:41:28.613Z Open on db.gcve.eu Reference links http://www.osvdb.org/22940 http://www.vupen.com/english/advisories/2006/0433 http://securitytracker.com/id?1015589 http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0062.html http://www.securityfocus.com/archive/1/424148/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0573`	vulnerable	2026-06-08 04:48:54.541448	Details available Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to (a) editquota.html or (b) dodelpop.html; (2) showtree parameter to (c) diskusage.html; or the (3) mon, (4) year, (5) target, or (6) domain parameter to (d) stats/detailbw.html. Published: 2006-02-07T18:00:00.000Z Updated: 2024-08-07T16:41:28.859Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0433 https://exchange.xforce.ibmcloud.com/vulnerabilities/24468 http://marc.info/?l=bugtraq&m=113898556313924&w=2 http://www.osvdb.org/22938 http://www.osvdb.org/22939	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.