Unrated severityNVD Advisory· Published May 4, 2006· Updated Jun 16, 2026
CVE-2006-2174
CVE-2006-2174
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, or (3) year parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4.7.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:virtual_hosting_control_system:virtual_hosting_control_system:2.4.7.1:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/archive/1/432711nvdExploit
- www.securityfocus.com/bid/17790nvdExploit
- secunia.com/advisories/19940nvdVendor Advisory
- securityreason.com/securityalert/832nvd
- www.aria-security.net/hm/vhcs.txtnvd
- www.vupen.com/english/advisories/2006/1634nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26209nvd
News mentions
0No linked articles in our index yet.