{"api_version":"1","generated_at":"2026-07-23T07:46:25+00:00","cve":"CVE-2006-5883","urls":{"html":"https://cve.report/CVE-2006-5883","api":"https://cve.report/api/cve/CVE-2006-5883.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5883","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5883"},"summary":{"title":"CVE-2006-5883","description":"Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-11-14 19:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"3.5","severity":"","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://securityreason.com/securityalert/1847","name":"http://securityreason.com/securityalert/1847","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CPanel Multiple Cross Site Scription - CXSecurity WLB","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/451374/100/0/threaded","name":"http://www.securityfocus.com/archive/1/451374/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/30387","name":"http://www.osvdb.org/30387","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://aria-security.net/advisory/cpanel.txt","name":"http://aria-security.net/advisory/cpanel.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"404 Not Found","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/4500","name":"http://www.vupen.com/english/advisories/2006/4500","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/21027","name":"http://www.securityfocus.com/bid/21027","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"CPanel User and Dir Parameters Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/30386","name":"http://www.osvdb.org/30386","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/22825","name":"http://secunia.com/advisories/22825","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CPanel Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5883","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5883","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5883","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cpanel","cpe5":"cpanel","cpe6":"10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T20:04:55.760Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20061112 CPanel Multiple Cross Site Scription","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/451374/100/0/threaded"},{"name":"30387","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/30387"},{"name":"ADV-2006-4500","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/4500"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aria-security.net/advisory/cpanel.txt"},{"name":"30386","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/30386"},{"name":"22825","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22825"},{"name":"21027","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/21027"},{"name":"1847","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/1847"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-11-12T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20061112 CPanel Multiple Cross Site Scription","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/451374/100/0/threaded"},{"name":"30387","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/30387"},{"name":"ADV-2006-4500","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/4500"},{"tags":["x_refsource_MISC"],"url":"http://aria-security.net/advisory/cpanel.txt"},{"name":"30386","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/30386"},{"name":"22825","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22825"},{"name":"21027","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/21027"},{"name":"1847","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/1847"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5883","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20061112 CPanel Multiple Cross Site Scription","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/451374/100/0/threaded"},{"name":"30387","refsource":"OSVDB","url":"http://www.osvdb.org/30387"},{"name":"ADV-2006-4500","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/4500"},{"name":"http://aria-security.net/advisory/cpanel.txt","refsource":"MISC","url":"http://aria-security.net/advisory/cpanel.txt"},{"name":"30386","refsource":"OSVDB","url":"http://www.osvdb.org/30386"},{"name":"22825","refsource":"SECUNIA","url":"http://secunia.com/advisories/22825"},{"name":"21027","refsource":"BID","url":"http://www.securityfocus.com/bid/21027"},{"name":"1847","refsource":"SREASON","url":"http://securityreason.com/securityalert/1847"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5883","datePublished":"2006-11-14T19:00:00.000Z","dateReserved":"2006-11-14T00:00:00.000Z","dateUpdated":"2024-08-07T20:04:55.760Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-11-14 19:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:10:*:*:*:*:*:*:*","matchCriteriaId":"D0F23C1C-4F4E-4BFA-8FF2-51BF76EAE0C1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5883","Ordinal":"1","Title":"CVE-2006-5883","CVE":"CVE-2006-5883","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5883","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.","Type":"Description","Title":"CVE-2006-5883"},{"CveYear":"2006","CveId":"5883","Ordinal":"2","NoteData":"2006-11-14","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5883","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}