CVE-2008-6465: Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P...

Security readout for executives and security teams

This CVE describes cross-site scripting in the Parallels H-Sphere webshell4 login page. An attacker could cause script or HTML to run in a victim's browser through specific login.php parameters. Business risk is mainly account abuse, phishing, or control-panel trust damage. The provided sources do not show active exploitation or a confirmed patch. Likely exposure is limited to organizations still running Parallels H-Sphere 3.0.0 P9 or 3.1 P1 with webshell4 login.php reachable, especially on internet-facing hosting control panels. The structured affected-product metadata is incomplete and lists n/a, so product/version confirmation is important. Prioritize if legacy H-Sphere panels remain exposed to customers or the internet. The issue is old and lacks active exploitation evidence, but control-panel XSS can still create meaningful account and trust risk when unsupported systems remain online. Mitigation focus: Identify any Parallels H-Sphere 3.0.0 P9 or 3.1 P1 deployments.; Check Parallels or successor vendor guidance for supported fixes or upgrade paths.; Restrict access to H-Sphere control panels to trusted networks where feasible..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.