CVE-2006-2181

Published: May 4, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.

Affected (1)

Products: Albinator: Albinator

Albinator

1 product

Albinator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Albinator Albinator	Up to 2.0.8

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (14)

http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html

Source: cve@mitre.org

http://secunia.com/advisories/19952

Source: cve@mitre.org

http://www.osvdb.org/25242

Source: cve@mitre.org

http://www.osvdb.org/25243

Source: cve@mitre.org

http://www.securityfocus.com/bid/17826

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1643

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26240

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html