← Database

CVE-2006-4293

MEDIUM CVSS: 4.3 Published: 2006-08-22 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.

Affected Platforms

Cpanel Cpanel

Weakness Type

NVD-CWE-Other

References