CVE-2006-1430

Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php, (2) sharedPlanID parameter to shared_order.php, (3) plan_id parameter to customers/server_management.php, and (4) email field to customers/forgotpass.php.

• http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html
• http://secunia.com/advisories/19432Vendor Advisory
• http://www.osvdb.org/24173
• http://www.osvdb.org/24174Exploit
• http://www.osvdb.org/24175Exploit
• http://www.osvdb.org/24176Exploit
• http://www.securityfocus.com/bid/17282Exploit
• http://www.vupen.com/english/advisories/2006/1131
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25491
• http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html
• http://secunia.com/advisories/19432Vendor Advisory
• http://www.osvdb.org/24173
• http://www.osvdb.org/24174Exploit
• http://www.osvdb.org/24175Exploit
• http://www.osvdb.org/24176Exploit
• http://www.securityfocus.com/bid/17282Exploit
• http://www.vupen.com/english/advisories/2006/1131
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25491

Published

Mar 28, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1424Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-1425Cross-site scripting (XSS) vulnerability in track.php in php…
• CVE-2006-1426Multiple SQL injection vulnerabilities in Pixel Motion Blog …
• CVE-2006-1427Multiple cross-site scripting (XSS) vulnerabilities in WebAP…
• CVE-2006-1428Multiple cross-site scripting (XSS) vulnerabilities in phpCO…
• CVE-2006-1429Cross-site scripting (XSS) vulnerability in accountlogon.cfm…
• CVE-2006-1431Cross-site scripting (XSS) vulnerability in local.cfm in fus…
• CVE-2006-1432fusionZONE couponZONE 4.2 allows remote attackers to obtain …
• CVE-2006-1433Annuaire (Directory) 1.0 allows remote attackers to obtain s…
• CVE-2006-1434Cross-site scripting (XSS) vulnerability in inscription.php …
• CVE-2006-1435Cross-site scripting (XSS) vulnerability in genmessage.php i…
• CVE-2006-1436Multiple cross-site scripting (XSS) vulnerabilities in UPOIN…