CVEvulnerability
CVE-2006-1407
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp.
Affected configurations
• webhost automation helm web hosting control panel (<= 3.2.10)
References
- http://attrition.org/pipermail/vim/2006-March/000654.html attrition.org
- http://pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html pridels0.blogspot.com
- http://secunia.com/advisories/19375 Vendor Advisory
- http://www.osvdb.org/24125 www.osvdb.org
- http://www.osvdb.org/24126 www.osvdb.org
- http://www.securityfocus.com/bid/17263 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1093 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25470 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30309 exchange.xforce.ibmcloud.com
- http://attrition.org/pipermail/vim/2006-March/000654.html attrition.org
- http://pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html pridels0.blogspot.com
- http://secunia.com/advisories/19375 Vendor Advisory
- http://www.osvdb.org/24125 www.osvdb.org
- http://www.osvdb.org/24126 www.osvdb.org
- http://www.securityfocus.com/bid/17263 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1093 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25470 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30309 exchange.xforce.ibmcloud.com