CVEvulnerability

CVE-2006-5014

8.8 HIGH Published 2006-09-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-09-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-276

Description

Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.

Affected configurations

• cpanel cpanel 5.0 • cpanel cpanel 5.3 • cpanel cpanel 6.0 • cpanel cpanel 6.2 • cpanel cpanel 6.4 • cpanel cpanel 6.4.1 • cpanel cpanel 6.4.2 • cpanel cpanel 6.4.2 stable 48 • cpanel cpanel 7.0 • cpanel cpanel 8.0 • cpanel cpanel 9.0 • cpanel cpanel 9.1 • cpanel cpanel 9.1.0 r85 • cpanel cpanel 9.4.1 r64 • cpanel cpanel 9.9.1 r3 • cpanel cpanel 10.2.0 r82 • cpanel cpanel 10.6.0 r137 • cpanel cpanel 10.8.1 113 • cpanel cpanel 10.8.2 118

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References