CVE-2006-5984

N/A Unknown
Published: November 20, 2006 Modified: April 23, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) txtCompanyName, (2) txtEmail, or (3) txtUserAccNum parameter to (a) users.asp, or the (4) setThemeColour parameter to (b) default.asp in the Reseller and Admin levels; or the (5) setThemeColour parameter to default.asp in the User level. NOTE: the txtDomainName parameter to domains.asp is covered by CVE-2006-1407, which suggests that this vector is fixed in 3.2.10 stable.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://aria-security.net/advisory/helm.txt
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/22916
Source: cve@mitre.org
Vendor Advisory
http://securityreason.com/securityalert/1884
Source: cve@mitre.org
http://securitytracker.com/id?1017240
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/451737/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/451848/100/200/threaded
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2006/4557
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/30309
Source: cve@mitre.org
http://aria-security.net/advisory/helm.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/22916
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securityreason.com/securityalert/1884
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1017240
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/451737/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/451848/100/200/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2006/4557
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/30309
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.7%
82th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

webhost_automation