CVE-2006-5535

Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate.

• http://changelog.cpanel.net/Patch
• http://secunia.com/advisories/22555Patch, Vendor Advisory
• http://securityreason.com/securityalert/1780
• http://www.securityfocus.com/archive/1/449472/100/0/threaded
• http://www.securityfocus.com/bid/20683Exploit, Patch
• http://www.vupen.com/english/advisories/2006/4190
• http://changelog.cpanel.net/Patch
• http://secunia.com/advisories/22555Patch, Vendor Advisory
• http://securityreason.com/securityalert/1780
• http://www.securityfocus.com/archive/1/449472/100/0/threaded
• http://www.securityfocus.com/bid/20683Exploit, Patch
• http://www.vupen.com/english/advisories/2006/4190

Published

Oct 26, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5529Cross-site scripting (XSS) vulnerability in smumdadotcom_asc…
• CVE-2006-5530Multiple cross-site scripting (XSS) vulnerabilities in Boesc…
• CVE-2006-5531PHP remote file inclusion vulnerability in embedded.php in A…
• CVE-2006-5532Cross-site scripting (XSS) vulnerability in rmgs/images.php …
• CVE-2006-5533Multiple PHP remote file inclusion vulnerabilities in AROUND…
• CVE-2006-5534Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2006-5536Directory traversal vulnerability in cgi-bin/webcm in D-Link…
• CVE-2006-5537Multiple cross-site scripting (XSS) vulnerabilities in cgi-b…
• CVE-2006-5538D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows re…
• CVE-2006-5539PHP remote file inclusion vulnerability in login/secure.php …
• CVE-2006-5540backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 al…
• CVE-2006-5541backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.…