CVEvulnerability
CVE-2006-2181
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.
Affected configurations
• albinator albinator (<= 2.0.8)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html pridels0.blogspot.com
- http://secunia.com/advisories/19952 secunia.com
- http://www.osvdb.org/25242 www.osvdb.org
- http://www.osvdb.org/25243 www.osvdb.org
- http://www.securityfocus.com/bid/17826 Exploit
- http://www.vupen.com/english/advisories/2006/1643 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26240 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html pridels0.blogspot.com
- http://secunia.com/advisories/19952 secunia.com
- http://www.osvdb.org/25242 www.osvdb.org
- http://www.osvdb.org/25243 www.osvdb.org
- http://www.securityfocus.com/bid/17826 Exploit
- http://www.vupen.com/english/advisories/2006/1643 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26240 exchange.xforce.ibmcloud.com