CVE-2006-2533

MEDIO 5.8CVE-2006-2533 · Published 22/05/2006 · updated 16/06/2026

In breve

CVE-2006-2533 è una vulnerabilità MEDIO (CVSS 5.8) che riguarda destiney rated images script (greg donald).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 71.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
destiney rated images script greg_donald	`= 0.5.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag.

References

secunia.com/advisories/20249
securityreason.com/securityalert/940
securityfocus.com/archive/1/434691/100/0/threaded
securityfocus.com/archive/1/435093/100/0/threaded
securityfocus.com/bid/18070
vupen.com/english/advisories/2006/1927
exchange.xforce.ibmcloud.com/vulnerabilities/26605

Altre vulnerabilità di destiney rated images script

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free