CVE-2006-0193

MEDIUM 4.3CVE-2006-0193 · Published 13/01/2006 · updated 16/06/2026

In short

CVE-2006-0193 is a MEDIUM (CVSS 4.3) vulnerability affecting h-sphere (positive software).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
h-sphere positive_software	`= 2.4.1= 2.4.1_patch_1= 2.4.1_patch_2= 2.4.1_patch_3= 2.4.1_patch_4= 2.4.1_patch_5= 2.4.1_patch_6= 2.4.1_patch_7= 2.4.2= 2.4.2_beta_1= 2.4.2_beta_2= 2.4.2_beta_3= 2.4.2_patch_1= 2.4.2_patch_2= 2.4.2_patch_3= 2.4.2_patch_4= 2.4.2_patch_5= 2.4.2_rc1= 2.4.2_rc2= 2.4.3= 2.4.3_beta_1= 2.4.3_beta_2= 2.4.3_patch_1= 2.4.3_patch_2= 2.4.3_patch_3= 2.4.3_patch_4= 2.4.3_patch_5= 2.4.3_patch_6= 2.4.3_patch_7= 2.4.3_patch_8= 2.4.3_rc1= 2.4.3_rc2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action.

References

More vulnerabilities in h-sphere

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

h-sphere

positive_software

= 2.4.1= 2.4.1_patch_1= 2.4.1_patch_2= 2.4.1_patch_3= 2.4.1_patch_4= 2.4.1_patch_5= 2.4.1_patch_6= 2.4.1_patch_7= 2.4.2= 2.4.2_beta_1= 2.4.2_beta_2= 2.4.2_beta_3= 2.4.2_patch_1= 2.4.2_patch_2= 2.4.2_patch_3= 2.4.2_patch_4= 2.4.2_patch_5= 2.4.2_rc1= 2.4.2_rc2= 2.4.3= 2.4.3_beta_1= 2.4.3_beta_2= 2.4.3_patch_1= 2.4.3_patch_2= 2.4.3_patch_3= 2.4.3_patch_4= 2.4.3_patch_5= 2.4.3_patch_6= 2.4.3_patch_7= 2.4.3_patch_8= 2.4.3_rc1= 2.4.3_rc2

No fix yet

More vulnerabilities in h-sphere

See all →