High severity · published Sep 27, 2006
CVE-2006-5014
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin
8.8
CVSS
4%
EPSS
No
On KEV
Description
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cpanel · Cpanel
5.0; 5.3; 6.0; 6.2; 6.4; 6.4.1; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5014
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5014
changelog.cpanel.net
http://changelog.cpanel.net/?build=&showall=1
forums.cpanel.net
http://forums.cpanel.net/showthread.php?t=58134
Patch
http://secunia.com/advisories/22072
securitytracker.com
http://securitytracker.com/id?1016913
www.securityfocus.com
http://www.securityfocus.com/bid/20163
More from Cpanel
9.8
CVE-2026-41940
WebPros cPanel and WHM Authentication Bypass via Login Flow
9.8
CVE-2020-26108
cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488)
9.8
CVE-2020-26105
In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554)
9.8
CVE-2020-26101
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549)
9.8
CVE-2020-26100
chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497)