Skip to content
Fencer Vulns
medium 6.0

CVE-2006-6198 json

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitr…

published 2006-12-01 19 y ago modified 2026-06-16 4 mo ago also EUVD-2006-6181

cvss
6.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.8%
EPSS 1.8% chance of exploitation in 30 days, percentile 78%
public exploits
7
Exploit-DB

Summary

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) scripts2/dochangeemail, the (2) supporturl parameter to (b) cgi/addon_configsupport.cgi, the (3) pkg parameter to (c) scripts/editpkg, the (4) domain parameter to (d) scripts2/domts2 and (e) scripts/editzone, the (5) feature parameter to (g) scripts2/dofeaturemanager, and the (6) ndomain parameter to (h) scripts/park.

Timeline

  1. First public exploit (EDB-29188)
  2. Published

Exploit prediction

1.82% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-29188 cPanel WebHost Manager 3.1 - 'park?ndomain' Cross-Site Scripting webapps, 2006-11-25
  • EDB-29187 cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting webapps, 2006-11-25
  • EDB-29186 cPanel WebHost Manager 3.1 - 'editzone?domain' Cross-Site Scripting webapps, 2006-11-25
  • EDB-29185 cPanel WebHost Manager 3.1 - 'domts2?domain' Cross-Site Scripting webapps, 2006-11-25
  • EDB-29184 cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting webapps, 2006-11-25
  • EDB-29183 cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting webapps, 2006-11-25
  • EDB-29182 cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting webapps, 2006-11-25
  • securityfocus.com http://www.securityfocus.com/bid/21288 referenced PoC, tagged "exploit" by a source, unverified
  • aria-security.com http://www.aria-security.com/forum/showthread.php?t=44 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 6.0 AV:N/AC:M/Au:S/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.