VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 12, 2007· Updated Apr 23, 2026

CVE-2007-0890

CVE-2007-0890

Description

Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter.

Affected products

24
  • CPanel/Webhost Manager24 versions
    cpe:2.3:a:cpanel:webhost_manager:10.2.0_r82:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:cpanel:webhost_manager:10.2.0_r82:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:10.6.0_r137:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:10.8.1_113:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:10.8.1_build84:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:10.8.2_118:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:10.9:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:11:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:11_beta:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:6.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:6.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:6.4.2_stable_48:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:9.1.0_r85:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:9.4.1_r64:*:*:*:*:*:*:*
    • cpe:2.3:a:cpanel:webhost_manager:9.9.1_r3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.