CVE-2006-2532
- State
- Published
- Severity
- Not scored
- Published
- May 22, 2006
- Updated
- Aug 7, 2024
- Reserved
- May 22, 2006
Description
stats.php in Destiney Rated Images Script 0.5.0 allows remote attackers to obtain the installation path via an invalid s parameter, which displays the path in an error message. NOTE: this issue was originally claimed to be SQL injection, but CVE analysis shows that the problem is related to an invalid value that prevents some variables from being set.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20060521 Destiney Rated Images Script v0.5.0 - XSS Vulnvmailing-list
- destineyris-stats-sql-injection(26603)vdb-entry
- 940third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.