CVE Database
/

CVE-2006-2533

Back to search

CVE-2006-2533

Published: May 22, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag.

VendorProductVersions

n/a

n/a

affected
n/a

References

20249
third-party-advisory
x_refsource_SECUNIA
destineyris-multiple-xss(26605)
vdb-entry
x_refsource_XF
ADV-2006-1927
vdb-entry
x_refsource_VUPEN
18070
vdb-entry
x_refsource_BID
940
third-party-advisory
x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now