CVE-2006-6198

cPanel WebHost Manager 3.1.0 - Authenticated Cross-Site Scripting via Multiple Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 7 public exploits for CVE-2006-6198. PoCs published by Aria-Security Team.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.

Description

Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) scripts2/dochangeemail, the (2) supporturl parameter to (b) cgi/addon_configsupport.cgi, the (3) pkg parameter to (c) scripts/editpkg, the (4) domain parameter to (d) scripts2/domts2 and (e) scripts/editzone, the (5) feature parameter to (g) scripts2/dofeaturemanager, and the (6) ndomain parameter to (h) scripts/park.

Exploits (7)

exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29188

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to a vulnerable WebHost Manager instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29186

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to a vulnerable WebHost Manager instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29184

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the browser context of an unsuspecting user.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to a vulnerable WebHost Manager instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29185

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could exploit this vulnerability to execute arbitrary script code in the context of the affected site.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to a vulnerable WebHost Manager instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29187

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to a vulnerable WebHost Manager instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29182

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to a vulnerable WebHost Manager instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsphp
https://www.exploit-db.com/exploits/29183

The provided text describes a cross-site scripting (XSS) vulnerability in WebHost Manager version 3.1.0, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'supporturl' parameter.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: WebHost Manager 3.1.0
No auth needed
Prerequisites: Access to the vulnerable WebHost Manager interface
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21288
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30507
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1938
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/452618/100/0/threaded

Scores

EPSS 0.0168
EPSS Percentile 73.9%

Details

Status published
Products (1)
cpanel/webhost_manager 3.1.0
Published Dec 01, 2006
Tracked Since Feb 18, 2026