CVE-2006-3337

Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter.

Affected products

Cpanel

Cpanel

≤ 10.8.2_current_118

Fix

Available

CVSS 2.0

2.6 LOW

EPSS

2.2% (81th percentile)

NVD status

Modified

Published

2006-07-03