CVE-2006-2532

MEDIO 6.4CVE-2006-2532 · Published 22/05/2006 · updated 16/06/2026

In breve

CVE-2006-2532 è una vulnerabilità MEDIO (CVSS 6.4) che riguarda destiney rated images script (greg donald).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
destiney rated images script greg_donald	`= 0.5.0`	No fix yet

Description

stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in an error message. NOTE: this issue was originally claimed to be SQL injection, but CVE analysis shows that the problem is related to an invalid value that prevents some variables from being set.

References

Altre vulnerabilità di destiney rated images script

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free