CVE-2006-2181

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26240

http://www.vupen.com/english/advisories/2006/1643

http://www.osvdb.org/25243

http://www.osvdb.org/25242

http://secunia.com/advisories/19952

http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html

Details

Source: Mitre, NVD

Published: 2006-05-04

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N